Aha found it - - field.number - obtain this field match - field.delimiter - decimal value of delimiter character for field extraction
Thanks anyway! Brian On Tue, Jul 7, 2015 at 11:29 AM, Brian Knox <[email protected]> wrote: > I wish to extract the second part of a hostname as a property. The "field > replacer" ( where you set fromChar to "F" and toChar as the number of the > field you wish to extract) looks to fit the bill for what I want. > > I realized I don't know how to specify fromChar / toChar in v8 format in a > list template. Is this possible? Or do I need to use a string template? > > Brian > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
