the tags show up in the parsed data as "event.tags": [ "cisco", "ASA-6-302014" ]
so the question is how to make use of them, we don't have much in the way of array capabilities.
there is the array match for if statements, but I don't know if there is a way to use it for this?
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
