David, that's an interesting idea and I agree that it would be useful in a couple of cases (maybe the majority). I am hesitant do touch the code though for two reasons:
a) this doesn't seem to be ultra-critical and as a refactoring is going on, I'd really like to save some time and wait for that to complete b) using that feature would more than clumsy with the current config format. Let's finish something decent here, where we can build on and introduce the feature after that (when hopefully a) has been finished as well). Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of [email protected] > Sent: Wednesday, June 29, 2011 10:50 PM > To: rsyslog-users > Subject: Re: [rsyslog] imfile feature request > > Rainer, > one of the things that I think needs to be done with imfile is to > have > it run through the 'normal' parser process. If you do that, then > $InputFileTag essentially becomes a custom parser module, but if it's > not > provided, you would fall through to the traditional parser, which would > handle files containing syslog-type data (as opposed to the message- > only > data that you are expecting now) > > I think this would probably simplify imfile as well. > > this would also handle the issue of escaping control characters in the > message as a side effect. > > David Lang > > On Wed, 29 Jun 2011, Rainer Gerhards wrote: > > > There currently is a refactor/rewrite of imfile underway. Please see > here: > > > > http://kb.monitorware.com/imfile-refactor-t10622.html > > > > I am hesitant to add non-trivial things (like this is) until this is > > finished. I suggest to add that feature request to the thread (note > that I am > > NOT the author of the refactoring, so I don't know if the author has > seen > > your list posting). > > > > Rainer > > > >> -----Original Message----- > >> From: [email protected] [mailto:rsyslog- > >> [email protected]] On Behalf Of Piavlo > >> Sent: Wednesday, June 29, 2011 8:14 AM > >> To: [email protected] > >> Subject: [rsyslog] imfile feature request > >> > >> Hi, > >> > >> Currently the $InputFileTag option is mandatory. > >> I have a case there the messages in $InputFileName already have the > >> ident field (programname) as the first field in the messages - I'd > like > >> imfile to get the messages as-is without adding the $InputFileTag to > >> the > >> messages - so that I could use the original first field as > programname > >> to automatically split the messages to files on remote system. > >> > >> Is there chance such feature can be implemented. > >> > >> Otherwise I need to do some ugly things with property replacer which > on > >> the my first trials does seems to have enough features to do that I > >> need. > >> > >> Thanks > >> Alex > >> _______________________________________________ > >> rsyslog mailing list > >> http://lists.adiscon.net/mailman/listinfo/rsyslog > >> http://www.rsyslog.com > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
