[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Fri Jul 8 10:30:42 CEST 2016
User: awinberg
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26748#p26748
Message:
----------
[quote:fs6bmjin]So how should rsyslog make the decision that this is not
valid for your use case? Think about it...[/quote:fs6bmjin]
Hm, not sure I follow. The message has the following properties:
[code:fs6bmjin]syslogtag 'vmkernel:', programname: 'vmkernel',
APP-NAME: 'vmkernel', PROCID: '', MSGID: '-',[/code:fs6bmjin]
The 'procid' property is empty, which for my usecase is an invalid message.
Why wouldnt I be able to filter out messages with an empty procid?
More information about the rsyslog-notify
mailing list