[rsyslog-notify] Forum Thread: Re: Removing <PRI> in a forwarded syslog message - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Wed Sep 30 18:46:05 CEST 2015
User: smartdave
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25972#p25972
Message:
----------
Dlang
Did you mean the following?
set [b:10qoxkv8][u:10qoxkv8]$.meg[/u:10qoxkv8][/b:10qoxkv8] =
exec_template("RSYSLOG_TraditionalFileFormat");
$template myfmt,
"[][][%fromhost-ip%][%timegenerated:::date-unixtimestamp%][]
%$.[b:10qoxkv8][u:10qoxkv8]msg[/u:10qoxkv8][/b:10qoxkv8]%\n"
In the Set you call the variable $.meg then in the template you use $.msg
I assume we want the same right?
More information about the rsyslog-notify
mailing list