Just for fyi. after lots of head-banging, found out, the include *.conf definition (for /etc/rsyslog.d/*)in /etc/rsyslog.conf was the last line. Moving it at top did the trick.
Thanks, Ashish -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of David Lang Sent: Tuesday, April 12, 2016 5:54 PM To: rsyslog-users <[email protected]> Subject: Re: [rsyslog] Imfile $!metadata!filename gets automatically included in $!all-json On Tue, 12 Apr 2016, Alec Swan wrote: > Hi there, > > Is there a reason why imfile reports file name as $!metadata!filename > causing it to be automatically included in $!all-json? All other > properties, such as $programname, $hostname, etc., don't start with $! > and hence are not automatically included in $!all-json, which I think > is the desired behavior. the properties that don't have ! in them all existed before rsyslog had the concept of variables that could be defined. They are legacy oddballs. you can use the set/unset commands to move it wherever you want and remove it from $! tree. David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
