Hi Folks, It seems that imjournal populates the systemd/journal fields defined here, http://www.freedesktop.org/software/systemd/man/systemd.journal-fields.html, using the same field names as CEE properties.
But it seems that rsyslog considers "$!_" as some kind of escape sequence, I cannot reference a field like: set $.systemd!t!AUDIT_LOGINUID = $!_AUDIT_LOGINUID; Is that expected? And if so, is there a way around it without requiring a change to imjournal? Thanks, -peter _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
