No, I don't detect them, just capture them with a special regexp because I only need to process PHP slowlog. which memory addr appear in the beginning `\[0x\w+\]`... The use case for slow functions stack without mem addrs can be found at the slide 25 (pie charts for nested sub terms aggs).
2016-11-25 15:39 GMT+08:00 Rainer Gerhards <[email protected]>: > 2016-11-25 8:26 GMT+01:00 chenlin rao <[email protected]>: > > - rewrite most of mmgrok into mmnormalize+rainerscript. Except PHP > slowlog > > only. We want to translate the memory address of each line into "xxxxx", > > but seems can't be done in rsyslog, so a mmexternal here. > > focussed question: how exactly do you detect memory address? I ask > because there is mmanon, which does something similiar to IP > addresses, and I *think* it could be extended to other objects if only > we know pricesely what to look for and how to transform it. > > Rainer > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
