On Wed, 4 Feb 2015, singh.janmejay wrote:
On Wed, Feb 4, 2015 at 6:22 PM, David Lang <[email protected]> wrote:
On Wed, 4 Feb 2015, singh.janmejay wrote:
On Wed, Feb 4, 2015 at 7:17 AM, David Lang <[email protected]> wrote:
Field type 'descent' does this, but not exactly in the same way.
does it? I understood it to just be calling another ruleset on the whole
line (doc problem again)
It allows field to identify how remaining-text should be returned, which
allows it to be parsed by remaining part of the rule which the field
belongs to.
Here is a test which uses something similar to what you are trying to do:
https://github.com/rsyslog/liblognorm/blob/master/tests/field_tokenized_recursive.sh#L41
(check 41 to EOF)
This looks like it may do this, but it looks like it's not in the release yet.
I'll have to compile from scratch.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.