There are so many cases where someone needs to override something in the default template (bad hostname, bad programname, etc) that having to create a custom tempalte for each thing gets to be a hassle.

I'd like to propose that we have some templates that are exactly the same as the default ones, but that look (for example) for $.hostname and if it's set, use that instead of $hostname. Have this setup for everything in the default template set.

I don't know if we dare to do this to the existing templates, or if these would need to be new templates. If new, could they be built-in, or should they be string modules that are explicitly loaded (and if string modules, could they override the default definitions??)

I also think that we need to have a couple of JSON based templates:

file and forwarding versions of the base templates that use $! for the message body instead of $msg (do we need a version with '@cee:? or can we modify mmjsonparse to have an option to no longer require that now that cee is dead?)


and finally a template that is just "$!\n" to use when forwarding to other tools (nxlog, logstash, etc)

thoughts?

David Lang

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to