> Hi, > > version 7.2.0 OK, then field-substrings work. In text templates, it's a but clumpsy, it should be
%msg:F:5,2:$% This extracts from position 2 to the end of the field ($), actually removing the space in position 1. Rainer > > /Flavio > > > From: [email protected] > > To: [email protected] > > Date: Thu, 22 Nov 2012 09:53:33 +0000 > > Subject: Re: [rsyslog] Parsing msg > > > > Which version do you use? > > > > > -----Original Message----- > > > From: [email protected] [mailto:rsyslog- > > > [email protected]] On Behalf Of Flavio Oliveira > > > Sent: Thursday, November 22, 2012 10:52 AM > > > To: [email protected] > > > Subject: Re: [rsyslog] Parsing msg > > > > > > > > > Hi, > > > > > > How can I remove a space from the begining of extracted field? > > > > > > %msg:F:5% = " rsyslog" ... I would like to trim, and have > "rsyslog". > > > > > > Is it possible to add a regex to %msg:F:5%? > > > > > > Flavio > > > > > > > From: [email protected] > > > > To: [email protected] > > > > Date: Tue, 30 Oct 2012 16:39:46 +0000 > > > > Subject: Re: [rsyslog] Parsing msg > > > > > > > > Oops,hit return too quickly... > > > > > >If I need more than one > > > > > > field (Positions 3, 5 and 6), I just need to do something > like > > > > > > %msg:F:3:5:6%? > > > > %msg:F:3%%msg:F:5%%msg:F:6% > > > > > > > > Rainer > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > POST > > > if you DON'T LIKE THAT. > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > POST > > > if you DON'T LIKE THAT. > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
