angus.aqlu created LOG4J2-923:
---------------------------------
Summary: eventPrefix of Rfc5424Layout not implemented
Key: LOG4J2-923
URL: https://issues.apache.org/jira/browse/LOG4J2-923
Project: Log4j 2
Issue Type: Bug
Components: Appenders
Affects Versions: 2.1
Reporter: angus.aqlu
Fix For: 2.2
when use rsyslog to collect data, I can use rsyslog output to elasticsearch, so
I need mmjsonparse module to format msg. when i use this configuration:
{code:xml}
<Syslog name="RFC5424" charset="UTF-8" format="RFC5424" host="192.168.65.181"
port="13514" protocol="UDP"
appName="testApp" includeMDC="false" facility="USER"
newline="true" messageId="Audit" mdcId="MDC"
eventPrefix="@cee:"/>
{code}
I hope the message format is :
<14>1 2014-12-16T15:23:55.773+08:00 anmac.local testApp - Audit -
@cee:{"aa":"bb"}
but I got:
<14>1 2014-12-16T15:23:55.773+08:00 anmac.local testApp - Audit - {"aa":"bb"}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
