you can define a lookup table for this sort of thing

but keep in mind, the source logs don't have this text in them, they have the severity encoded as a number in the PRI field along with the facility

so rather than trying to convert logseverity-text, just have a lookup that converts the number to whatever text you want and store the result in a variable that you then use in your template
rsyslog mailing list
What's up with rsyslog? Follow
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 

Reply via email to