Hi Rainer, again! Now, actually to the real question ;)
I would like to customize the fields rsyslog sends, or rather stores into MySQL. So for example, I would like to have a special ID that I could identify a group of related messages. Is that possible? Here[0] is is exemplified how to arrange the fields from rsyslog into mysql, so I would like to have something a long these lines, but to be able to add my own field so I can group by it instead of while executing an aftermath to analyze the mysql data for an id inside the message text. [0]: http://www.rsyslog.com/doc//ommysql.html Cheers, and thanks in advance! -Sivan On Wed, Nov 3, 2010 at 5:01 PM, Sivan Greenberg <[email protected]> wrote: > Hey! > > On Wed, Nov 3, 2010 at 4:19 PM, Rainer Gerhards > <[email protected]> wrote: >> Hi Sivan, >> >> that field is normally not used by rsyslog ;) The schema supports all of >> Adiscon's MonitorWare products. EventID is usually populated by the >> (commercial) Windows products, which store the Windows Event ID there. Having >> a common schema simplifies things, so I pulled the complete schema over. > > Indeed, thanks for the note. That makes a lot of sense. > > -Sivan > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

