Thanks for that. I'll take a look at this module today. I had presumed the answer might lay in rainer script but this is something to look into!
I have a few thoughts after a very rough look into mmnormalize, those being: * faster log processing seems to be a big factor in using this module * the need to install extra packages -- as seems to be the case from reading https://www.rsyslog.com/normalizer-first-steps-for-mmnormalize/ * whether the actions can be applied to properties like source/hostname to determine the log file destinations * compatibility/disturbance to other logging configurations through adding a normalization step to server.conf Hopefully I'll find the answers with some more readings/experimentation :) Cheers, Jordan On 5/08/19 5:43 PM, David Lang wrote: > take a look at mmnormalize, it's FAR more efficient than regex. > > the regex capability is a last-ditch way to manipulate things. > > David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
