Hi,
I'm sending syslog data that's formatted as json via a rsyslog
template to kafka. Works great.
Most of the applications in my infrastructure (there are many) also
write logging output to files as JSON (one long json string per line).
I'd love to be able to use this data in a template in Rsyslog but I'm
not sure how. The logging lines are not @cee tagged and that won't be
changed :-(
Ideally something like this - any pointers, anyone, on what I might do?
```
action(type="mmjsonparse") # parse CEE-formatted messages
template(name="syslog-cee" type="list") { # Elasticsearch documents
will contain
property(name="$!all-json") # all JSON fields that were parsed
}
```
Many thanks,
Matt.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
