On Tue, Apr 15, 2014 at 11:27 AM, Joop Boonen <[email protected]> wrote:
> Dear all, > > As php-fpm does only sent log messages with severity notice but want to > parse them as we want then at warning as this is also configured in the > php-fpm configuration file. We would like to rewrite the severity of this > message, basically all php-fpm messages from 5 to 4. > > I expected that the property replacer count do the trick but I cant find > any information about this. > > http://www.rsyslog.com/doc/property_replacer.html > > In this link, http://rsyslog-users.1305293.n2.nabble.com/facility- > rewriting-td7569455.html , is also entioned that it's possible but no > example is shown. > > I've also read that the mmnormalize module, http://www.rsyslog.com/doc/ > mmnormalize.html , could do the tick. But sadly I cant find enough > information. > > > If it is just a forwarding case, you can do that with a proper template and a couple of if's. The best way is to write a message modification module. Currently, the severity and facility can only be modified by C modules, but I will see if I can add that option to the external plugin interface. Rainer > Our setup is that the rsyslog on the server running php-fpm is forwarding > the syslog to a graylog2 server. We would like to rewrite the data on > rsyslog on the server running php-fpm. > > Regards, > > Joop. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
