[rsyslog-notify] Forum Thread: Re: TSV data into mongodb - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Tue May 12 20:27:51 CEST 2015


User: toddaa 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25574#p25574

Message: 
----------
[code:1eiooqsb]# cat tsv


rule=:%fields:tokenized:\\t:char-to:\\%\\t%test:word%

# echo
"INFO\tstream\tplay\t2015-05-12\t10:56:27\t409963998\tclientip\t-\t3633\t3497\t0.081\t081808\t1\t0\t0\t0\t133581414\t2360.859\t081808\t-\trtmp\trtmp://host/app/\thttps://host1/script/player.swf\tapp\t1431442560"
| /usr/bin/lognormalizer -r tsv -e json -T

{"originalmsg":
"INFO\\tstream\\tplay\\t2015-05-12\\t10:56:27\\t409963998\\tclientip\\t-\\t3633\\t3497\\t0.081\\t081808\\t1\\t0\\t0\\t0\\t133581414\\t2360.859\\t081808\\t-\\trtmp\\trtmp://host/app/\\thttps://host1/script/player.swf\\tapp\\t1431442560",
"unparsed-data":
"INFO\\tstream\\tplay\\t2015-05-12\\t10:56:27\\t409963998\\tclientip\\t-\\t3633\\t3497\\t0.081\\t081808\\t1\\t0\\t0\\t0\\t133581414\\t2360.859\\t081808\\t-\\trtmp\\trtmp://host/app/\\thttps://host1/script/player.swf\\tapp\\t1431442560"}
[/code:1eiooqsb]


More information about the rsyslog-notify mailing list