Hello,
I have a csv that is created, and use nxlog to submit it to graylog.
For some reason i only seem to receive the first letter from the extracted
field, just hopeing someone is able to help:
Example csv output:
Changed,C:\test\ToDelete\test.txt,,7/13/2016,11:00 AM
NxLog conf:
<Extension w3c>
Module xm_csv
Fields $ChangeType, $ChangeName, $ChangeOldName,
$ChangeDate, $ChangeTime
FieldTypes string, string, string, string, string
Delimiter ','
#Delimiter ,
# QuoteChar '"'
# EscapeControl FALSE
# UndefValue -
</Extension>
<Input smtp>
Module im_file
File "C:\\Powershell\\changelog.txt"
SavePos TRUE
# ReadFromLast FALSE
Exec if $raw_event =~ /^#/ drop(); \
else \
{ \
w3c->parse_csv(); \
$EventTime = parsedate($date + " " + $time); \
$EventTime = strftime($EventTime, "%Y-%m-%dT%H:%M:%SZ"); \
$SourceName = "TripWire"; \
$Message = to_json(); \
}
</Input>
GrayLog Message in interface:
full_message
Toggle dropdown
{"EventReceivedTime":"2016-07-13
10:52:57","SourceModuleName":"smtp","SourceModuleType":"im_file","ChangeType":"C","ChangeName":"","ChangeOldName":"","ChangeDate":"","ChangeTime":"","EventTime":"1970-01-01T00:00:00Z","SourceName":"subtest"}
Many Thanks,
Paul.
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/1cdc02b7-283a-49ad-94c1-a47c5345d01f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
