[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Fri Jul 8 10:30:42 CEST 2016


User: awinberg 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26748#p26748

Message: 
----------
[quote:fs6bmjin]So how should rsyslog make the decision that this is not
valid for your use case? Think about it...[/quote:fs6bmjin]
Hm, not sure I follow. The message has the following properties:

[code:fs6bmjin]syslogtag 'vmkernel:', programname: 'vmkernel',
APP-NAME: 'vmkernel', PROCID: '', MSGID: '-',[/code:fs6bmjin]
The 'procid' property is empty, which for my usecase is an invalid message.
Why wouldnt I be able to filter out messages with an empty procid?


More information about the rsyslog-notify mailing list