On Mon, 5 Dec 2016, [email protected] wrote:
Hi
Coming back to liblognorm, I have a few questions I'll love an expert reply.
0:D
*- Documentation [1] states how to define a type, but not how to use it. Are
we properly using defined type "apache" in the configuration below?*
almost, %@apache% makes no more sense than %word%, you need to give the match a
name
so %log:@apache% would work, or if you want to move everything up a later
(rather than having $!apache!ip) you could do %.:@apache%
- Apache access log seem to have 2 formats: common and combined [2]
127.0.0.1 - frank [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif
HTTP/1.0" 200 2326
127.0.0.1 - - [10/Oct/2000:13:55:36 -0700] "GET /apache_pb.gif HTTP/1.0"
200 2326 "referrer" "useragent"
*How should we define our rulesets to have /optional/ fields?
there is the alturnative capability in the v2 language, or define multiple rules
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.