Thanks David for youy prompt reply. Did you mean rfc5424 ? if so, the message is deifned in BNF:
SYSLOG-MSG = HEADER SP STRUCTURED-DATA [SP MSG] HEADER = PRI VERSION SP TIMESTAMP SP HOSTNAME SP APP-NAME SP PROCID SP MSGID An originator, which is the caller of syslog() function in our case, can specify MSGID ? Looks syslog() C function only can specify the facility/priority and the message body. Is there any way to generate the header with MSGID specified by the function callers ? Currently we are implementing this in a filter, where a keyword is scanned in the message body to identify the log type. Regards, Tao. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of David Lang Sent: Thursday, May 05, 2016 8:54 PM To: rsyslog-users Subject: Re: [rsyslog] how to set property msgid value by rsyslog API ? On Thu, 5 May 2016, Zhou, Tao wrote: > Hi there, > > We are evaluating the logging system variants for our embedded low end Linux > application. One of our requirements is to identify the log type when the log > message is generated at the first place. > > msgid is defined as property in rsyslog. How do I set msgid when I generate a > log ? > > I searched the rsyslog documents and what I found was how to use property, > i.e. msgid, hostname, etc in filter and template. Nothing about how to > generate them by users API. They are set by passing in a message using the RFC5324 format. Or, you can parse the message that you have received and then create a custom template to output the message with the extracted value in the msgid field. David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

