On Thu, 27 May 2010, John Li wrote: > Not totally agree. First, your will lose the flexibility in the input side > if you put the rewritten code in the input module. Second, parser looks like > to target the syslog format validity instead of message rewritten.
it doesn't just validate the message, it takes the message off the wire, and breaksit into the separate properties that rsyslog handles internally (and are available for the output templates). It already has the option to modify the string as it does this (look at control character re-writing) > But if it's not possible to rewrite the msg in the output module, I will > have to do that in the parser. Can someone please confirm? I agree that doing it in the output would be far better in many ways, but since there isn't a way to do a plugin there (at least not as far as I know, it would be good to get confirmation or a better idea) David Lang > Thanks. > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
