In general, it works the way you use it. The big exception is "sp-if-no-1st-sp", which always returns either a single space or none -- and as such can not be combined. This is atually a hack, which was required in order to make RFC3164 work in all instances. The good news is that the second line you use does not incur any performance hit.
HTH Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Sayan Chowdhury > Sent: Monday, February 14, 2011 6:52 PM > To: rsyslog-users > Subject: [rsyslog] rsyslog multiple property replacer option > > Hello All, > I am trying to add multiple property replacer options to a rsyslog.conf > file > of a 4.2.0 system. > What I need to do is add escape-cc to existing propery replacer rules > > Here is what I am trying to do > $template forwardformat, "<%PRI%>%TIMESTAMP% %HOSTNAME% > %syslogtag:1:32%%msg:::escape-cc,sp-if-no-1st-sp%%msg:1:950%" > This does not work. > > However, the following rule where I have only one property replacer > option > works. I would imagine this would be less efficient though , as it will > make > multiple passes over the message. > > $template forwardformat, "<%PRI%>%TIMESTAMP% %HOSTNAME% > %syslogtag:1:32%%msg:::escape-cc%%msg:::sp-if-no-1st-sp%%msg:1:950%" > > Is there something wrong with the comma seperated option list in the > first > message? > > Regards, > Sayan > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
