Hi Rainer, again!

Now, actually to the real question ;)

I would like to customize the fields rsyslog sends, or rather stores
into MySQL. So for example, I would like to have a special ID that I
could identify a group of related messages.

Is that possible? Here[0] is is exemplified how to arrange the fields
from rsyslog into mysql, so I would like to have something a long
these lines, but to be able to add my own field so I can group by it
instead of while executing an aftermath to analyze the mysql data for
an id inside the message text.

[0]:  http://www.rsyslog.com/doc//ommysql.html

Cheers, and thanks in advance!

-Sivan
On Wed, Nov 3, 2010 at 5:01 PM, Sivan Greenberg <[email protected]> wrote:
> Hey!
>
> On Wed, Nov 3, 2010 at 4:19 PM, Rainer Gerhards
> <[email protected]> wrote:
>> Hi Sivan,
>>
>> that field is normally not used by rsyslog ;) The schema supports all of
>> Adiscon's MonitorWare products. EventID is usually populated by the
>> (commercial) Windows products, which store the Windows Event ID there. Having
>> a common schema simplifies things, so I pulled the complete schema over.
>
> Indeed, thanks for the note. That makes a lot of sense.
>
> -Sivan
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to