I'm confused now.
Did you make everything case-insensitive a long time ago, and then made
it case-sensitive again (in order to solve "same name, different casing"
json fields, among others)?
It's supposed to be case-sensitive now, but fields created by rsyslog
are created lowercase?
Regards
El 16/11/16 a las 16:05, Rainer Gerhards escribió:
2016-11-16 15:38 GMT+01:00 mosto...@gmail.com <mosto...@gmail.com>:
A quick look up returned:
https://github.com/rsyslog/rsyslog/search?utf8=%E2%9C%93&q=tolower
This is relevant:
https://github.com/rsyslog/rsyslog/issues/481
Rainer
El 16/11/16 a las 11:48, mosto...@gmail.com escribió:
Rainer, what do you think?
A "removed-lowercase" branch could work for this, while helping us to
solve #1116
El 16/11/16 a las 11:11, David Lang escribió:
On Wed, 16 Nov 2016, mosto...@gmail.com wrote:
According to https://tools.ietf.org/html/rfc5424#section-6.3.2 and
https://tools.ietf.org/html/rfc5424#section-6.3.3 both are *case-sensitive*.
As stated in
http://www.rsyslog.com/doc/v8-stable/configuration/modules/mmpstrucdata.html
: "Note that the case of the RFC5424 parameter names has been converted to
lower case."
*Why it's being lowercased? *
There was a time when rsyslog didn't allow you to access upper case items
(and per a discussion we are currently having, that may not have been fully
fixed yet)
I can confirm that having a look at:
https://github.com/rsyslog/rsyslog/blob/master/plugins/mmpstrucdata/mmpstrucdata.c#L219
Perhaps this is somehow related to
https://github.com/rsyslog/rsyslog/issues/1116
May I open an issue?
you can always open an issue :-)
you can also always open a PR
now, they may get closed with an explination instead of worked on, but
you can always open them :-P
That said, It does sound like in this case we should remove the
lowercasing from the mm module, but we need to double-check that we allow
access to the upper-case variables now.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
