Sent from phone, thus brief. Am 06.10.2014 20:34 schrieb "Balint Szigeti" <[email protected]>: > > On Mon, 2014-10-06 at 19:55 +0200, Rainer Gerhards wrote: >> >> Sent from phone, thus brief. >> Am 06.10.2014 19:43 schrieb "David Lang" <[email protected]>: >> > >> > On Mon, 6 Oct 2014, Balint Szigeti wrote: >> > >> >> On Mon, 2014-10-06 at 06:31 -0700, David Lang wrote: >> >>> >> >>> On Mon, 6 Oct 2014, Balint Szigeti wrote: >> >>> >> >>>>> Yes, the insert command to MySQL can be anything that you want (by setting the >> >>>>> format), and you can have different conditions to write different formats. >> >>>>> look at http://www.rsyslog.com/doc/ommysql.html for the template example. >> >>>>> >> >>>>> David Lang >> >>>> >> >>>> >> >>>> and how can you do it? you should specified in a template the order of >> >>>> cells and you can use only one template for one action. Yes, you can >> >>>> separate them according to syslog tag but the rsyslog doesn't create >> >>>> automatically the table even it has the proper credentials. >> >>> >> >>> >> >>> What is your question? >> >> >> >> >> >> My question is, how it possible it to use 2nd normal form with rsyslog. >> >> I think currently it is impossible. >> > >> > >> > Ok, i'm not understanding what you mean by "2nd normal form" >> >> http://en.m.wikipedia.org/wiki/Database_normalization >> >> The key thing is that rsyslog is primarily a log processing system, not a dbms. You can, however normalize your tables and craft configurations that put different message parts into different tables. Depending on what you intend to do, its probably easier to write a plugin, e.g. in python. > > can you insert here a link which can help me to write this plugin? is Perl an option?
http://www.rsyslog.com/writing-external-output-plugins-for-rsyslog/ > >> >> Rainer >> > >> > David Lang >> > >> > >> >>> >> >>> you create the table before you start sending logs to the database. >> >>> >> >>> you are correct that you can only have one template in an action, but since you >> >>> can define conditions on when that action is used, you just define your >> >>> different templates and use the conditions to decide which one to use. >> >> >> >> >> >> thank you. that was my idea as well. >> >> >> >>> >> >>> David Lang >> >> >> >> >> >> >> > _______________________________________________ >> > rsyslog mailing list >> > http://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. >> >> > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
