Rainer,
one of the things that I think needs to be done with imfile is to have
it run through the 'normal' parser process. If you do that, then
$InputFileTag essentially becomes a custom parser module, but if it's not
provided, you would fall through to the traditional parser, which would
handle files containing syslog-type data (as opposed to the message-only
data that you are expecting now)
I think this would probably simplify imfile as well.
this would also handle the issue of escaping control characters in the
message as a side effect.
David Lang
On Wed, 29 Jun 2011, Rainer Gerhards wrote:
There currently is a refactor/rewrite of imfile underway. Please see here:
http://kb.monitorware.com/imfile-refactor-t10622.html
I am hesitant to add non-trivial things (like this is) until this is
finished. I suggest to add that feature request to the thread (note that I am
NOT the author of the refactoring, so I don't know if the author has seen
your list posting).
Rainer
-----Original Message-----
From: [email protected] [mailto:rsyslog-
[email protected]] On Behalf Of Piavlo
Sent: Wednesday, June 29, 2011 8:14 AM
To: [email protected]
Subject: [rsyslog] imfile feature request
Hi,
Currently the $InputFileTag option is mandatory.
I have a case there the messages in $InputFileName already have the
ident field (programname) as the first field in the messages - I'd like
imfile to get the messages as-is without adding the $InputFileTag to
the
messages - so that I could use the original first field as programname
to automatically split the messages to files on remote system.
Is there chance such feature can be implemented.
Otherwise I need to do some ugly things with property replacer which on
the my first trials does seems to have enough features to do that I
need.
Thanks
Alex
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
