I have just glimpsed at your mail, but I think I see the problem: colon terminates the tag!
HTH Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Axel Rosenski > Sent: Wednesday, August 10, 2011 5:29 PM > To: [email protected] > Subject: [rsyslog] problem with field based property replacement > > Hi, > > after I ran into some trobles with the number of characters of %procid% > as > described in my previous mail I tried to use %syslogtag% and field > based > extraction. > > In my Apache config I > CustomLog "|/usr/bin/logger -p local0.info -t apache2:my.domain.name" > combined > > On the Logserver i defined the following template > $template TESTApacheSSLAccessLogFile, > "/var/log/test/%syslogtag:F,58:1%/%syslogtag:F,58:2%/%syslogtag:F,58:2% > _access_log" > > In my tests the second field is empty and the generated log files don't > have > names with "my.domain.name". I only get > /var/log/test/apache2/_access_log > > Can anyone give me a hint? > > Kind regards, > Axel Rosenski > > -- > Axel Rosenski > - Administration - > ______________________________ > Wave Computersysteme GmbH > Philipp-Reis-Str. 1-3 / 9 > 35440 Linden > > Geschäftsführer: Carsten Kellmann > Registergericht Gießen HRB 1823 > > Tel.: +49 (0)6403 / 9050 8317 > Fax: +49 (0)6403 / 9050 5089 > mailto:[email protected] > http://www.wave-computer.de > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
