On Mon, 2014-10-06 at 20:36 +0200, Rainer Gerhards wrote: > Sent from phone, thus brief. > Am 06.10.2014 20:34 schrieb "Balint Szigeti" <[email protected]>: > > > > On Mon, 2014-10-06 at 19:55 +0200, Rainer Gerhards wrote: > >> > >> Sent from phone, thus brief. > >> Am 06.10.2014 19:43 schrieb "David Lang" <[email protected]>: > >> > > >> > On Mon, 6 Oct 2014, Balint Szigeti wrote: > >> > > >> >> On Mon, 2014-10-06 at 06:31 -0700, David Lang wrote: > >> >>> > >> >>> On Mon, 6 Oct 2014, Balint Szigeti wrote: > >> >>> > >> >>>>> Yes, the insert command to MySQL can be anything that you > want (by setting the > >> >>>>> format), and you can have different conditions to write > different formats. > >> >>>>> look at http://www.rsyslog.com/doc/ommysql.html for the > template example. > >> >>>>> > >> >>>>> David Lang > >> >>>> > >> >>>> > >> >>>> and how can you do it? you should specified in a template the > order of > >> >>>> cells and you can use only one template for one action. Yes, > you can > >> >>>> separate them according to syslog tag but the rsyslog doesn't > create > >> >>>> automatically the table even it has the proper credentials. > >> >>> > >> >>> > >> >>> What is your question? > >> >> > >> >> > >> >> My question is, how it possible it to use 2nd normal form with > rsyslog. > >> >> I think currently it is impossible. > >> > > >> > > >> > Ok, i'm not understanding what you mean by "2nd normal form" > >> > >> http://en.m.wikipedia.org/wiki/Database_normalization > >> > >> The key thing is that rsyslog is primarily a log processing system, > not a dbms. You can, however normalize your tables and craft > configurations that put different message parts into different tables. > Depending on what you intend to do, its probably easier to write a > plugin, e.g. in python. > > > > can you insert here a link which can help me to write this plugin? > is Perl an option? > > http://www.rsyslog.com/writing-external-output-plugins-for-rsyslog/ >
Thank you > > > >> > >> Rainer > >> > > >> > David Lang > >> > > >> > > >> >>> > >> >>> you create the table before you start sending logs to the > database. > >> >>> > >> >>> you are correct that you can only have one template in an > action, but since you > >> >>> can define conditions on when that action is used, you just > define your > >> >>> different templates and use the conditions to decide which one > to use. > >> >> > >> >> > >> >> thank you. that was my idea as well. > >> >> > >> >>> > >> >>> David Lang > >> >> > >> >> > >> >> > >> > _______________________________________________ > >> > rsyslog mailing list > >> > http://lists.adiscon.net/mailman/listinfo/rsyslog > >> > http://www.rsyslog.com/professional-services/ > >> > What's up with rsyslog? Follow https://twitter.com/rgerhards > >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. > >> > >> > > > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
