[rsyslog-notify] Forum Thread: Send Rsyslog events to Mongodb - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Thu Aug 18 18:20:29 CEST 2016


User: Sav 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26882#p26882

Message: 
----------
Hello all,

I intend to send rsyslog events to Mongodb with the following lines into
the /etc/rsyslong.conf:

[code:25f9y5b7]$ModLoad ommongodb
$ModLoad mmjsonparse

template(name="mongodball" type="subtree" subtree="$!")
action(type="mmjsonparse")
set $!time = $timestamp;
set $!sys = $hostname;
set $!procid = $syslogtag;
set $!syslog_fac = $syslogfacility;
set $!syslogsever = $syslogpriority;
set $!pid = $procid;
action(type="ommongodb" server="@IP_Mongodb" db="syslog" collection="log"
template="mongodball")[/code:25f9y5b7]

I followed this <!-- m --><a class="postlink"
href="http://www.rsyslog.com/how-to-use-rsyslog-and-mongodb/">http://www.rsyslog.com/how-to-use-rsyslog-and-mongodb/</a><!--
m --> to compile and my Rsyslog server store events for several client
hosts in one folder each.

I may have made a mistake in this configuration file because Rsyslog
doesn't run anymore with this conf.

Any help please ?

Thank you !


More information about the rsyslog-notify mailing list