On Mon, 2014-10-06 at 03:11 -0700, David Lang wrote: > On Sat, 4 Oct 2014, Balint Szigeti wrote: > > > hello > > > > is it possible to split up the log event message into cells instead of > > put the whole message in one cell? > > > > I mean, there will be a 'switcher' table like normal form 2 for the > > often repeated elements like dbus, dbus-daemon,NetworkManager and they > > will have an ID > > > > Oct 4 08:04:46 SZIGETI-6560B NetworkManager: bound to 192.168.244.1 -- > > renewal in 891 seconds. > > Oct 4 08:04:46 SZIGETI-6560B dbus-daemon: dbus[1013]: [system] > > Successfully activated service 'org.freedesktop.nm_dispatcher' > > Oct 4 08:04:46 SZIGETI-6560B dbus[1013]: [system] Successfully > > activated service 'org.freedesktop.nm_dispatcher' > > > > and specify relations between the messages and switcher table. > > > > The best would be if the mysql table form would be customised. Now it > > has a 'static' form that you should add to a template and the template > > will fill in the ONE table. There isn't built-in rotation. > > Of course, writing own script solve table the rotation but what will > > happen if the table will grown to big? I think the rsyslog engine simple > > can't handle this case. > > Yes, the insert command to MySQL can be anything that you want (by setting > the > format), and you can have different conditions to write different formats. > look at http://www.rsyslog.com/doc/ommysql.html for the template example. > > David Lang
and how can you do it? you should specified in a template the order of cells and you can use only one template for one action. Yes, you can separate them according to syslog tag but the rsyslog doesn't create automatically the table even it has the proper credentials. Balint _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
