> > > > Oh wait... So in the %src-ip:ipv4% , the "src-ip" portion is > just > > > what the rule base "names" the field? Ie - it could easily be: > > > > > > %nifty:%ipv4% .... now "nifty" is the "field name" for the "ip > > > address"? > > > > jup > > Ah! Brilliant! In the future, you'll probably want to > encourage some standards.. or you'll end up with %ip-source%ipv4% and > %ip-src%ipv4% ... :) > > However, great job.. love it.. >
I changed the text for field names in this article a bit. I hope it now describes better how it is meant: http://www.liblognorm.com/help/creating-a-sampledb/ Florian > -- > Champ Clark III | Softwink, Inc | 800-538-9357 x 101 > http://www.softwink.com > > GPG Key ID: 58A2A58F > Key fingerprint = 7734 2A1C 007D 581E BDF7 6AD5 0F1F 655F 58A2 A58F If > it wasn't for C, we'd be using BASI, PASAL and OBOL. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
