Re: [nxlog-ce-users] Modify Fields with modules

2013-08-27 Thread Aurélien BOUVARD
; After , all we be perfect even if now i'm already very happy to see how > > powerfull nxlog is :) > > Regards, > > > > > Date: Tue, 27 Aug 2013 10:22:33 +0200 > > > From: [email protected] > > > To: [email protected] > >

Re: [nxlog-ce-users] Modify Fields with modules

2013-08-27 Thread Botond Botyanszki
o put it instead of the "receive date " of syslog message. > After , all we be perfect even if now i'm already very happy to see how > powerfull nxlog is :) > Regards, > > > Date: Tue, 27 Aug 2013 10:22:33 +0200 > > From: [email protected] > > To: nxlog-

Re: [nxlog-ce-users] Modify Fields with modules

2013-08-27 Thread Aurélien BOUVARD
tead of the "receive date " of syslog message. After , all we be perfect even if now i'm already very happy to see how powerfull nxlog is :) Regards, > Date: Tue, 27 Aug 2013 10:22:33 +0200 > From: [email protected] > To: [email protected] > Subject: Re: [nx

Re: [nxlog-ce-users] Modify Fields with modules

2013-08-27 Thread Botond Botyanszki
Hi, The om_udp module will send the contents of the $raw_event field. I doubt that oracle's alert_xe.log file is in IETF syslog format, so using parse_syslog_ietf() doesn't make much sense. Example 6.18 is about collecting syslog, which probably doesn't apply here. You should use to_syslog_ietf(

[nxlog-ce-users] Modify Fields with modules

2013-08-27 Thread Aurélien BOUVARD
Hi all, I come back with my "famous" Oracle file alert.log. Now , i'm able to send to my syslog server (loganalyser) nearly the full error log message (multiline) so that's good.But of course , logs in this file are not "complete" Tue Aug 20 16:34:19 2013OER in Load Indicator : Error Code