Hello David,
On Mon, Jun 5, 2017 at 7:08 PM, David Lang <[email protected]> wrote:
> the only way I know to do it would be to first convert them to unix epoc
> time (seconds since Jan 1 1970) via exec_template and then compare the
> resulting numbers.
Thank you for you answer, that's an idea; however I am unable to get
it to work, e.g:
template(name="timereported_epoch" type="string"
string="%$!timereported%" dataFormat="unixtimestamp")
set $!epoch_generated = exec_template("timereported_epoch");
I also tried to write the template with:
template(name="timereported_epoch" type="list") {
property(name="timereported" dataFormat="unixtimestamp")
}
I try to print the result with a call to another template:
template(name="my_test" type="list") {
constant(value="->")
property(name="$!epoch_generated")
constant(value="<-\n")
}
The result seems empty.
Do you have any hint to help me convert the timereported and timegenerated?
Best,
--
William
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
