> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Radu Gheorghe > Sent: Monday, January 07, 2013 3:47 PM > To: rsyslog-users > Subject: Re: [rsyslog] Some list templates with mmjsonparse try to get > 2GB of RAM or give OOM > > Wow, that was fast! Thanks, Rainer! > > Regarding the related questions: > - please let me know if there's any issue with using $!all-json. I > would > need to use it to handle with CEE-enhanced and "regular" logs with the > same > template - and output a JSON. Something like: > > template(name="testTemplate" > type="list") { > constant(value="{") > constant(value="\"@timestamp\":\"") > property(name="timereported" dateFormat="rfc3339") > constant(value="\",") > property(name="$!all-json" position.from="2") > } > > I can work around that with 2 templates and %parsesuccess%, but I find > the > solution above much nicer.
No, I think $!all-json will stay, at least for a long while. During my testing, though, I saw something that looked strange. Had not time to investigate, yet. So be careful. The JSON may be sometimes incorrect (I'll verify later this week). > > As for contributions to the documentation: how can I actually do that? > Let's say I would want to contribute some changes to this page: > http://www.rsyslog.com/doc/property_replacer.html > > I mean, I only know how to do pull requests on github. In this case I > should simply download the html, change it and send the back the diff? That would be fine with me. If you know how to create your own branch on github and commit to it, that also works for me. Just as you like :-) Rainer > > Thanks and best regards, > Radu > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
