> Understood. This is really rough PoC code. I know I have a > "ip=" field, but I'm unclear on how to "call" that from > ee_getEventField(event, ??) ... > > I'm assuming I inform ee_getEventField to obtain the "ip" > field, then use ee_getFieldValueAsStr to get the value. Correct?
Argh. I'm such a dork :)
You know, sometimes it's better to just go to bed and pick
up the next morning. This morning, I reviewed what Rainer had said,
and had it working in about 5 minutes.
I wasn't using es_newStrFromBuf() buff correctly at all! So hence,
ee_getEventField() would obviously fail. Anyways, in my PoC
code I did a:
propName = es_newStrFromBuf("ip", 2); /* Yes, terrible, just wanted
see it work */
... and what do you know? I get the value I was looking
for. Man, sometimes I get to excited, I end up missing the most
simple things :) Thanks for the suggestions and hard work on
liblognorm.
--
Champ Clark III | Softwink, Inc | 800-538-9357 x 101
http://www.softwink.com
GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7 6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
pgpjxfqF2SPOa.pgp
Description: PGP signature
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
