On Mon, 5 Dec 2016, [email protected] wrote:

Hi


Coming back to liblognorm, I have a few questions I'll love an expert reply. 0:D

*- Documentation [1] states how to define a type, but not how to use it. Are we properly using defined type "apache" in the configuration below?*

almost, %@apache% makes no more sense than %word%, you need to give the match a name

so %log:@apache% would work, or if you want to move everything up a later (rather than having $!apache!ip) you could do %.:@apache%

- Apache access log seem to have 2 formats: common and combined [2]
127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326 127.0.0.1 - - [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0" 200 2326 "referrer" "useragent"
*How should we define our rulesets to have /optional/ fields?

there is the alturnative capability in the v2 language, or define multiple rules

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to