[rsyslog-notify] Forum Thread: Re: TSV data into mongodb - (Mode 'reply')

[noreply at adiscon.com]

User: toddaa 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25572#p25572

Message: 
----------
I'm getting there...slowly...apologize.  My findings so far today are the
same.  I was able to get my source log to be outputted as CSV rather than
TSV as I was finding write-ups more often with CSV, and to eliminate the
issue you mentioned with it using literals.  I found the following rule:

[code:jnhdyx42]rule=csv:%r1:char-to:,%,%r2:char-to:,%,%r3:char-to:,%,%r4:rest%[/code:jnhdyx42]This,
I assume, matches the first 3 fields and returns the rest in the
unparsed-data field as you said.  Nowhere do I see the first 3 fields
though.  Shouldn't they be returned in the array?  Here is the output:
[code:jnhdyx42]{"originalmsg": "
INFO,stream,play,2015-05-12,13:10:35,1383311350,clientip,-,3633,3497,0.084,081808,1,0,0,0,133581414,2360.859,081808,-,rtmp,rtmp://host/app/,https://host1/script/player.swf,app,1431450624",
"unparsed-data":
"2015-05-12,13:10:35,1383311350,clientip,-,3633,3497,0.084,081808,1,0,0,0,133581414,2360.859,081808,-,rtmp,rtmp://host/app/,https://host1/script/player.swf,vb_dev,1431450624"}[/code:jnhdyx42]