On 2014-04-15 15:41, Rainer Gerhards wrote:
On Tue, Apr 15, 2014 at 11:45 AM, Rainer Gerhards
<[email protected]>wrote:
On Tue, Apr 15, 2014 at 11:27 AM, Joop Boonen <[email protected]>
wrote:
Dear all,
As php-fpm does only sent log messages with severity notice but want
to
parse them as we want then at warning as this is also configured in
the
php-fpm configuration file. We would like to rewrite the severity of
this
message, basically all php-fpm messages from 5 to 4.
I expected that the property replacer count do the trick but I cant
find
any information about this.
http://www.rsyslog.com/doc/property_replacer.html
In this link, http://rsyslog-users.1305293.n2.nabble.com/facility-
rewriting-td7569455.html , is also entioned that it's possible but no
example is shown.
I've also read that the mmnormalize module,
http://www.rsyslog.com/doc/
mmnormalize.html , could do the tick. But sadly I cant find enough
information.
If it is just a forwarding case, you can do that with a proper
template
and a couple of if's. The best way is to write a message modification
module. Currently, the severity and facility can only be modified by C
modules, but I will see if I can add that option to the external
plugin
interface.
I have added this functionality to a new message modification module.
See
here:
https://github.com/rsyslog/rsyslog/tree/master/plugins/external/messagemod/fac-sever-rewrite
This will be released as part of 8.3.1. Until then, you need to use the
git
master branch and build from it.
Thank you very much.
Do you know when rsyslog 8.3.1 will be released?
Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
Regards,
Joop.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
