Hi,
I have defined the templates (enclosed at the end of the mail) for logging locally into a file and to forward to remote syslog server. Question: For the "ForwardFormat" Template can we replace %HOSTNAME% with a variable. I am able to replace it with a fixed string. i.e., Replacing %HOSTNAME% with MYCUSTOMIZEDHOSTNAME will have the MYCUSTOMIZEDHOSTNAME in the logs sent to remote syslog server. I used $MYCUSTOMIZEDHOSTNAME but the output log as $MYCUSTOMIZEDHOSTNAME Can we replace MYCUSTOMIZEDHOSTNAME with a Variable $.MYCUSTOMIZEDHOSTNAME or $@MYCUSTOMIZEDHOSTNAME, assign a value to it, use it in the template such that the value of the variable will be seen in logs. Templates: template(name="FileFormat" type="string" string="%timereported:::date-rfc3164%.%timereported:::date-subseconds% %syslogseverity-text% %HOSTNAME:F,46:1:uppercase% %syslogtag:R,ERE,1,FIELD:^(.*):--end%:%msg:::sp-if-no-1st-sp%%msg:::drop-cc%\n") template(name="ForwardFormat" type="string" string="<%PRI%>%TIMESTAMP:::date-rfc3339% %HOSTNAME% %syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%\n") Modified Template: template(name="ForwardFormat" type="string" string="<%PRI%>%TIMESTAMP:::date-rfc3339% $MYCUSTOMIZEDHOSTNAME %syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%\n") Output: 2018-03-15T09:37:07.902786+05:30.902786 info $MYCUSTOMIZEDHOSTNAME TESTPROCESS[1200]: Testing templates Using a Variable. Note: I don't want to set "$LocalHostName yourhostname" because the logs logged to a file on the local disc should have the HOSTNAME. Appreciate your help Thanks and Regards Lak. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
