On Wed, 3 Nov 2010, Sivan Greenberg wrote:
Hi Rainer, again!
Now, actually to the real question ;)
I would like to customize the fields rsyslog sends, or rather stores
into MySQL. So for example, I would like to have a special ID that I
could identify a group of related messages.
Is that possible? Here[0] is is exemplified how to arrange the fields
from rsyslog into mysql, so I would like to have something a long
these lines, but to be able to add my own field so I can group by it
instead of while executing an aftermath to analyze the mysql data for
an id inside the message text.
[0]: http://www.rsyslog.com/doc//ommysql.html
as this page shows, you can setup your own template to put whatever
properties you want in whatever database columns (or tables) you want.
just craft the SQL statement that you want to run and use that template.
David Lang
Cheers, and thanks in advance!
-Sivan
On Wed, Nov 3, 2010 at 5:01 PM, Sivan Greenberg <[email protected]> wrote:
Hey!
On Wed, Nov 3, 2010 at 4:19 PM, Rainer Gerhards
<[email protected]> wrote:
Hi Sivan,
that field is normally not used by rsyslog ;) The schema supports all of
Adiscon's MonitorWare products. EventID is usually populated by the
(commercial) Windows products, which store the Windows Event ID there. Having
a common schema simplifies things, so I pulled the complete schema over.
Indeed, thanks for the note. That makes a lot of sense.
-Sivan
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
