> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of [email protected] > Sent: Friday, May 28, 2010 7:26 AM > To: rsyslog-users > Subject: Re: [rsyslog] Where is the output module for the udp > transportationtoremote syslog server > > On Thu, 27 May 2010, John Li wrote: > > > Not totally agree. First, your will lose the flexibility in the input > side > > if you put the rewritten code in the input module. Second, parser > looks like > > to target the syslog format validity instead of message rewritten. > > it doesn't just validate the message, it takes the message off the > wire, > and breaksit into the separate properties that rsyslog handles > internally > (and are available for the output templates). It already has the option > to > modify the string as it does this (look at control character re- > writing) > > > But if it's not possible to rewrite the msg in the output module, I > will > > have to do that in the parser. Can someone please confirm?
John, You can do whatever you like in an output module, including rewriting any part of the message. Of course, you can NOT modify the message strings that *other* output modules see. > I agree that doing it in the output would be far better in many ways, > but > since there isn't a way to do a plugin there (at least not as far as I > know, it would be good to get confirmation or a better idea) David, can you tell me what you have on your mind for this functionality? I have thought a bit about it, and I probably have one approach myself. But I would prefer to hear your idea before I push you into a direction. Thanks, Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
