On Mon, 3 Aug 2015, Botond Botyanszki wrote:
> Hi,
>
> On Fri, 31 Jul 2015 20:02:14 -0700 (PDT)
> David Lang <[email protected]> wrote:
>
>> <Input mark>
>> ...
>> Exec set_var('logcount', 5 );
>> Exec set_var('logcount', ( get_var('logcount') + 1 ) );
> This is obviously 6.
>
>> <Input eventlog>
>> ..
>> Exec if size($raw_event) > get_var('maxsize') { set_var('maxsize',
>> size($raw_event)); }
> This will never hold true because nxlog uses three-valued logic, so
> "X > undef" will be always undef.
I tried settig the value to 0 in the mark message, why is it still undef here?
>> Exec $logcount = get_var('logcount');
>> Exec set_var('logcount', get_var('logcount') +1 );
> The same stands for addition, undef+1 is undef.
why is this undef after it's been set to '6' for the first time?
> Perhaps this will need to be revisited some day as it seems to trick a
> lot of people.
>
>> Second, I want to eliminate the CR in the log line, but the replace()
>> call doesn't seem to have any effect (I tries the same thing but with
>> $Message instead of $raw_event, no difference)
> The CRLF is added in the LineBased formatter after the Exec has been
> evaluated. I know the CR confuses rsyslog. There are plans to make this
> configurable.
> Right now the workaround is this:
> Exec $raw_event = $raw_event + "\n";
> OutputType Dgram
thanks
>> Third, on outputs, doe the Exec lines take effect before the output or
>> after? all the examples I can find use the exec for writing or rotating
>> a file. I'd like to move the message formatting from the inputs to the
>> outputs so it's not continually repeated.
> You can do that.
to be clear, the Exec statements in an output section take effect before the
line is output, correct?
David Lang
------------------------------------------------------------------------------
_______________________________________________
nxlog-ce-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
