[rsyslog-notify] Forum Thread: Send Rsyslog events to Mongodb - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Thu Aug 18 18:20:29 CEST 2016
User: Sav
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26882#p26882
Message:
----------
Hello all,
I intend to send rsyslog events to Mongodb with the following lines into
the /etc/rsyslong.conf:
[code:25f9y5b7]$ModLoad ommongodb
$ModLoad mmjsonparse
template(name="mongodball" type="subtree" subtree="$!")
action(type="mmjsonparse")
set $!time = $timestamp;
set $!sys = $hostname;
set $!procid = $syslogtag;
set $!syslog_fac = $syslogfacility;
set $!syslogsever = $syslogpriority;
set $!pid = $procid;
action(type="ommongodb" server="@IP_Mongodb" db="syslog" collection="log"
template="mongodball")[/code:25f9y5b7]
I followed this <!-- m --><a class="postlink"
href="http://www.rsyslog.com/how-to-use-rsyslog-and-mongodb/">http://www.rsyslog.com/how-to-use-rsyslog-and-mongodb/</a><!--
m --> to compile and my Rsyslog server store events for several client
hosts in one folder each.
I may have made a mistake in this configuration file because Rsyslog
doesn't run anymore with this conf.
Any help please ?
Thank you !
More information about the rsyslog-notify
mailing list