On Wed, 30 Sep 2015, Randall Diffenderfer wrote:
in 8.11 (R8-stable) documentation, we see under "Filter Conditions" http://www.rsyslog.com/doc/master/configuration/filters.html“if” and “then” are fixed keywords that mus be present. “expr” is a (potentially quite complex) expression. So the expression documentation<http://www.rsyslog.com/doc/master/configuration/expression.html> for details. “action-part-of-selector-line” is an action, just as you know it (e.g. “/var/log/logfile” to write to that file). However, the "expression documentation" link is busted. Is there another location for this? The Rainer Script link does tell me some stuff, but I'm mainly interested in what the various "stock" variables are that are parsed out of the message header.
for the 'stock' variables, look at http://www.rsyslog.com/doc/v8-stable/configuration/properties.html or write a local file with the template RSYSLOG_DebugFormat and it will show you what each variable contains.
David Lang
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
