Hi there,
I'd like to create a template using the handy "jsonf" format combining custom
properties and the "all-json" property like so:
template(name="json" type="list" option.jsonf="on"){
property(outname="@timestamp" name="timegenerated" dateFormat="rfc3339"
format="jsonf")
constant(outname="tags" value="[\"test\"]" format="jsonf")
property(name="$!all-json" position.from="2")
}
Now the issue is that there does not seem to be any option which allows
stripping the enclosing brackets from the "all-json" property. Either way,
"position.from" or "position.to" combined with "position.relativeToEnd" allows
stripping either "{" or "}" but never both as the length of the value varies.
Using format="jsonf" will handle the value as string and not as a JSON object
which is not what I want.
Is there any option available which provides the required behaviour with jsonf
enabled?
Thank you in advance and best regards
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
