Hi Ken,
Both should work but for the second case you need to call parse_syslog()
first, otherwise $Message is undefined.
1.
<Output out>
Module om_udp
Host x.x.x.x
Port 514
Exec $raw_event = $raw_event + "Project X";
</Output>
2.
<Output out>
Module om_udp
Host x.x.x.x
Port 514
<Exec>
parse_syslog();
$Message = $Message + "Project X";
to_syslog_bsd();
</Exec>
</Output>
Regards,
Botond
On Mon, 6 Jun 2016 14:36:49 -0400
ken delaney <kenneth.dela...@gmail.com> wrote:
> I would like to change the format of the message in syslod bsd before it's
> forwarded out to include an additional string.
>
> Current output configuration:
>
> <Output out>
> Module om_udp
> Host x.x.x.x
> Port 514
> </Output>
>
> One solution?
>
> <Output out>
> Module om_udp
> Host x.x.x.x
> Port 514
> $raw_event = $raw_event + "Project X";
> </Output>
>
> Or?
>
> <Output out>
> Module om_udp
> Host x.x.x.x
> Port 514
> $Message = $Message + "Project X"
> Exec to_syslog_bsd();
> </Output>
>
> Ken
>
> --
>
> Phone: 540.300.5081
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
