On Sat, 4 Oct 2014, Balint Szigeti wrote:
hello
is it possible to split up the log event message into cells instead of
put the whole message in one cell?
I mean, there will be a 'switcher' table like normal form 2 for the
often repeated elements like dbus, dbus-daemon,NetworkManager and they
will have an ID
Oct 4 08:04:46 SZIGETI-6560B NetworkManager: bound to 192.168.244.1 --
renewal in 891 seconds.
Oct 4 08:04:46 SZIGETI-6560B dbus-daemon: dbus[1013]: [system]
Successfully activated service 'org.freedesktop.nm_dispatcher'
Oct 4 08:04:46 SZIGETI-6560B dbus[1013]: [system] Successfully
activated service 'org.freedesktop.nm_dispatcher'
and specify relations between the messages and switcher table.
The best would be if the mysql table form would be customised. Now it
has a 'static' form that you should add to a template and the template
will fill in the ONE table. There isn't built-in rotation.
Of course, writing own script solve table the rotation but what will
happen if the table will grown to big? I think the rsyslog engine simple
can't handle this case.
Yes, the insert command to MySQL can be anything that you want (by setting the
format), and you can have different conditions to write different formats.
look at http://www.rsyslog.com/doc/ommysql.html for the template example.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
