On Wed, 18 Jan 2017, Benoit DOLEZ wrote:
Yes but it isn't possible to redefine "properties" variables. It could work if I work only with local ($!) variables (time, msg, ...). But I prefer finding a other solution (if possible) because copying all variables for one exception has performance impact.
copying the variables has less impact than you may think, but if you are wanting to have the standard properties created, then the only way is to write (or pay someone to write [1]) a parser module to handle this format.
Anything done with mmnormalize or mmexternal can only work with $! and $. variables. Only parser modules can set the standard properties.
David Lang [1] Adiscon offers Professional Services for this sort of thing. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
