[rsyslog-notify] Forum Thread: Rsyslog Message Property Contains Quotes - (Mode 'post')

[noreply at adiscon.com]

User: rhaney 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25899#p25899

Message: 
----------
I am fairly new to rsyslog and I'm looking for a little guidance. Currently
I am running rsyslog 5.8.12 on CentOS 5 and 6. I have an imfile watching a
log that sends messages with all kinds of random characters in the msg
property. Sometimes it contains a quote (") which seems to break the
template format and does not forward the message along. I turned on
debugging and didn't see anything jump out at me but like I said I'm fairly
new to this.  I am closely following the rfc5424 format here:

# Beginning of rsyslog.d/ conf
$MaxMessageSize 64k

### MODULES ####
$ModLoad imfile

$InputFileName /path/to/file/file.log
$InputFileTag tag
$InputFileStateFile state-file
$InputFileSeverity info
$InputFileFacility local2
$InputFilePollInterval 1
$InputFilePersistStateInterval 1
$InputRunFileMonitor

# <PRIVAL>VERSION TIMESTAMP HOSTNAME APP-NAME PROCID MSGID
[STRUCTURED-DATA] MESSAGE
$template EXAMPLE, "<%PRI%>%protocol-version% %TIMESTAMP:::date-rfc3339%
%HOSTNAME% %app-name% %procid% %msgid% [token at companycode
environemnt=\"development\" priority='INFO'] '%msg%'"

local2.info @@apache-flume;EXAMPLE

Any help would be greatly appreciated. Thank you.