On Fri, 15 Mar 2013, Miloslav Trmac wrote:

Hello,
----- Original Message -----
However, when using both features lets users override the trusted properties.
I guess It's because the JSON parsing takes place after the trusted properties 
parsing.
<snip>
Is there a way to make mmjsonparse parses the CEE payload before parsing
the trusted properties ? (making the trusted properties override user fields)
Alternatively, is there a way to make mmjsonparse put user data in a
subtree ?

Back in October Milan was working on a patch to modify mmjsonparse not to override existing message 
properties (IOW, the "trusted" properties from imuxsock would not be overwritten by JSON 
content of the message).  It seems that the "nonoverwrite" branch was never merged.

I'm afraid after that time I can't remember whether the branch was finished and 
ready for merging and/or acceptable by Rainer, and my mail archives don't tell 
either - Milan?

what happens with data that conflicts with something already set?

It's not ideal to just loose it. Ideally you would want to move it somewhere else so you can retrieve it if you really did want it.

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to