With changeing to $timereported instead of $!timereported logging was
completly broken.
This works for local message:
# ######### Fill variables with dynamic data through a template ##########
#
template(name="timereportedrfc3339" type="string"
string="%timereported:::date-rfc3339%")
set $!timereported = exec_template("timereportedrfc3339");
As you can see in both debug outputs all variables are in the same order
and with identical names.
a) Debug output of not working remote message:
Debug line with all properties:
FROMHOST: '192.168.178.201', fromhost-ip: '192.168.178.201', HOSTNAME:
'PCP25544', PRI: 135,
syslogtag 'SyslogGen', programname: 'SyslogGen', APP-NAME: 'SyslogGen',
PROCID: '-', MSGID: '-',
TIMESTAMP: 'Jul 3 19:09:51', STRUCTURED-DATA: '-',
msg: ' This is Syslog test message number 42#015'
escaped msg: ' This is Syslog test message number 42#015'
inputname: imtcp rawmsg: '<135>Jul 3 19:09:51 PCP25544 SyslogGen This is
Syslog test message number 42#015'
$!:
$.:
$/:
b) Debug output of working remote message:
Debug line with all properties:
FROMHOST: 'elma-devel', fromhost-ip: '127.0.0.1', HOSTNAME: 'elma-devel',
PRI: 46,
syslogtag 'rsyslogd:', programname: 'rsyslogd', APP-NAME: 'rsyslogd',
PROCID: '-', MSGID: '-',
TIMESTAMP: 'Jul 3 19:09:32', STRUCTURED-DATA: '-',
msg: ' [origin software="rsyslogd" swVersion="8.2.2" x-pid="5059" x-info="
http://www.rsyslog.com";] start'
escaped msg: ' [origin software="rsyslogd" swVersion="8.2.2" x-pid="5059"
x-info="http://www.rsyslog.com";] start'
inputname: rsyslogd rawmsg: ' [origin software="rsyslogd" swVersion="8.2.2"
x-pid="5059" x-info="http://www.rsyslog.com";] start'
$!:{ "originalmsg": " [origin software=\"rsyslogd\" swVersion=\"8.2.2\"
x-pid=\"5059\" x-info=\"http:\/\/www.rsyslog.com\"] start",
"unparsed-data": " x-info=\"http:\/\/www.rsyslog.com\"] start", "msg": "
[origin software=\"rsyslogd\" swVersion=\"8.2.2\" x-pid=\"5059\"
x-info=\"http:\/\/www.rsyslog.com\"] start", "timereported":
"2014-07-03T19:09:32.990725+02:00", "host": "elma-devel", "severity":
"info", "facility": "syslog", "syslogtag": "rsyslogd:", "country_code": "",
"customer": "" }
$.:
$/:
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
