On Tue, 12 Apr 2016, Ashish Barmase wrote:
Just for fyi. after lots of head-banging, found out, the include *.conf
definition (for /etc/rsyslog.d/*)in /etc/rsyslog.conf was the last line.
Moving it at top did the trick.
the include is very much the same as just putting the included text in the
config at that point. As such, the order of includes and where the include is in
the config file does matter.
David Lang
Thanks,
Ashish
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of David Lang
Sent: Tuesday, April 12, 2016 5:54 PM
To: rsyslog-users <[email protected]>
Subject: Re: [rsyslog] Imfile $!metadata!filename gets automatically included
in $!all-json
On Tue, 12 Apr 2016, Alec Swan wrote:
Hi there,
Is there a reason why imfile reports file name as $!metadata!filename
causing it to be automatically included in $!all-json? All other
properties, such as $programname, $hostname, etc., don't start with $!
and hence are not automatically included in $!all-json, which I think
is the desired behavior.
the properties that don't have ! in them all existed before rsyslog had the
concept of variables that could be defined. They are legacy oddballs.
you can use the set/unset commands to move it wherever you want and remove it
from $! tree.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is
a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our
control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
