[rsyslog-notify] Forum Thread: Re: TSV data into mongodb - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Tue May 12 22:46:26 CEST 2015


User: toddaa 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25579#p25579

Message: 
----------
HAZAA!!!!

[code:3kjjxv95]# cat /etc/rsyslog.mmnormalize.rb


rule=:%r1:char-to:,%,%r2:char-to:,%,%r3:char-to:,%,%r4:char-to:,%,%r5:char-to:,%,%r6:char-to:,%,%r7:char-to:,%,%r8:char-to:,%,%r9:char-to:,%,%r10:char-to:,%,%r11:char-to:,%,%r13:char-to:,%,%r14:char-to:,%,%r15:char-to:,%,%r16:char-to:,%,%r17:char-to:,%,%r18:char-to:,%,%r19:char-to:,%,%r20:char-to:,%,%r21:char-to:,%,%r22:char-to:,%,%r23:char-to:,%,%r24:char-to:,%,%r25:char-to:,%,%r26:word%


# echo
"INFO,stream,play,2015-05-12,13:10:35,1383311350,clientip,-,3633,3497,0.084,081808,1,0,0,0,133581414,2360.859,081808,-,rtmp,rtmp://host/app/,https://host1/script/player.swf,app,1431450624"
| /usr/bin/lognormalizer -r /etc/rsyslog.mmnormalize.rb

[cee at 115 r26="1431450624" r25="app"
r24="https://host1/script/player.swf" r23="rtmp://host/app/"
r22="rtmp" r21="-" r20="081808" r19="2360.859" r18="133581414" r17="0"
r16="0" r15="0" r14="1" r13="081808" r11="0.084" r10="3497" r9="3633"
r8="-" r7="clientip" r6="1383311350" r5="13:10:35" r4="2015-05-12"
r3="play" r2="stream" r1="INFO"][/code:3kjjxv95]


More information about the rsyslog-notify mailing list