On Mon, 2014-10-06 at 19:55 +0200, Rainer Gerhards wrote: > Sent from phone, thus brief. > Am 06.10.2014 19:43 schrieb "David Lang" <[email protected]>: > > > > On Mon, 6 Oct 2014, Balint Szigeti wrote: > > > >> On Mon, 2014-10-06 at 06:31 -0700, David Lang wrote: > >>> > >>> On Mon, 6 Oct 2014, Balint Szigeti wrote: > >>> > >>>>> Yes, the insert command to MySQL can be anything that you want > (by setting the > >>>>> format), and you can have different conditions to write > different formats. > >>>>> look at http://www.rsyslog.com/doc/ommysql.html for the template > example. > >>>>> > >>>>> David Lang > >>>> > >>>> > >>>> and how can you do it? you should specified in a template the > order of > >>>> cells and you can use only one template for one action. Yes, you > can > >>>> separate them according to syslog tag but the rsyslog doesn't > create > >>>> automatically the table even it has the proper credentials. > >>> > >>> > >>> What is your question? > >> > >> > >> My question is, how it possible it to use 2nd normal form with > rsyslog. > >> I think currently it is impossible. > > > > > > Ok, i'm not understanding what you mean by "2nd normal form" > > http://en.m.wikipedia.org/wiki/Database_normalization > > The key thing is that rsyslog is primarily a log processing system, > not a dbms. You can, however normalize your tables and craft > configurations that put different message parts into different tables. > Depending on what you intend to do, its probably easier to write a > plugin, e.g. in python.
can you insert here a link which can help me to write this plugin? is Perl an option? > > Rainer > > > > David Lang > > > > > >>> > >>> you create the table before you start sending logs to the > database. > >>> > >>> you are correct that you can only have one template in an action, > but since you > >>> can define conditions on when that action is used, you just define > your > >>> different templates and use the conditions to decide which one to > use. > >> > >> > >> thank you. that was my idea as well. > >> > >>> > >>> David Lang > >> > >> > >> > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
