On Tue, Apr 15, 2014 at 11:45 AM, Rainer Gerhards <[email protected]>wrote:
> On Tue, Apr 15, 2014 at 11:27 AM, Joop Boonen <[email protected]> wrote: > >> Dear all, >> >> As php-fpm does only sent log messages with severity notice but want to >> parse them as we want then at warning as this is also configured in the >> php-fpm configuration file. We would like to rewrite the severity of this >> message, basically all php-fpm messages from 5 to 4. >> >> I expected that the property replacer count do the trick but I cant find >> any information about this. >> >> http://www.rsyslog.com/doc/property_replacer.html >> >> In this link, http://rsyslog-users.1305293.n2.nabble.com/facility- >> rewriting-td7569455.html , is also entioned that it's possible but no >> example is shown. >> >> I've also read that the mmnormalize module, http://www.rsyslog.com/doc/ >> mmnormalize.html , could do the tick. But sadly I cant find enough >> information. >> >> >> > If it is just a forwarding case, you can do that with a proper template > and a couple of if's. The best way is to write a message modification > module. Currently, the severity and facility can only be modified by C > modules, but I will see if I can add that option to the external plugin > interface. > I have added this functionality to a new message modification module. See here: https://github.com/rsyslog/rsyslog/tree/master/plugins/external/messagemod/fac-sever-rewrite This will be released as part of 8.3.1. Until then, you need to use the git master branch and build from it. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
