To be more clear:

seems by default jsonroot = NULL, which IMHO should use "root as parent", instead of "rfc5424-sd".

Having "rfc5424-sd" as default it's mandatory for backwards compatibility?


El 16/11/16 a las 09:31, mosto...@gmail.com escribió:

Seems https://github.com/rsyslog/rsyslog/blob/master/plugins/mmpstrucdata/mmpstrucdata.c#L327 it's the proper place.

Would changing this to:

/json_object_object_add//(jroot, //"msg"//, json);/

do the trick?

Any disagreement to PR?




El 16/11/16 a las 02:00, David Lang escribió:
On Tue, 15 Nov 2016, mosto...@gmail.com wrote:

According to http://www.rsyslog.com/doc/v8-stable/configuration/modules/mmpstrucdata.html, structure data ID and parameters are stored under *rfc5424-sd* element in JSON.

It's there any way to store them as /firstchild/ elements (not using rfc5424-sd as parent, but !) ?

Otherwise, what's the best way to move those parameters /one level up/?

I don't think there is currently a good way to do this.

I think the right answer is to allow for the parent to be specified in the call to mmpstructdata similar to the way it can be set in mmnormalize.

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.


_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to