read though http://www.rsyslog.com/doc/ommysql.html and look at the template setting.

David Lang

On Wed, 24 Sep 2014, Ouychai Chaita wrote:

Date: Wed, 24 Sep 2014 17:27:42 +0700
From: Ouychai Chaita <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: rsyslog-users <[email protected]>
Subject: [rsyslog] How to making a log format in Mysql?

Dear all,
     I have a question with Logs format with Mysql. I using a config like
with.

$template
DailyLogs,"/var/log/iptables/%$YEAR%/%$MONTH%/%$DAY%_%$MONTH%_%$YEAR%_iptables.log"

$template
SquidTemplate,"%$day%/%timegenerated:1:3:date-rfc3164%/%$year%,%timegenerated:12:23:date-rfc3339%,%HOSTNAME%,%syslogtag%,%msg%\n"

$template
SquidDailyLogs,"/var/log/squid/%$YEAR%/%$MONTH%/%$DAY%_%$MONTH%_%$YEAR%_squid.log"

# kern.=debug -/var/log/iptables/iptables.log
kern.=debug  -?Dailylog

kern.*;kern.!=debug -/var/log/kern.log

local0.*            -?SquidDailyLogs;SquidTemplate

local0.*            :ommysql:localhost,Syslog,rsyslog,123456

I want to remove white space and remain one space in a message log. A
message log from squid log.

How to config log format in mysql?

              Reguards
            Ouychai Chaita

President of Lanna Opensource Software Club
     www.lanna-oss.org
(66) 08-7185-0920
skype : ouychai_chaita
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to