HI, two examples: # if the property's value is string, you can do string operation like: set $!field_name = 'A string concatenation with orig value' & $!field_name; # or if it is a number: set $!field_name = 2 * $!field_name + 123;
m. On Fri, Dec 27, 2019 at 7:44 PM kyparisisg via rsyslog < [email protected]> wrote: > Hello, > > I use mmnormalize to parse log messages. When the parsing is done and I > confirm that the rules create the desired fields, I want to modify one of > the fields and replace or remove some of the data that exist on that > internally generated property-variable. > > I use jsonparse and then mmnormalize to do the parsing. > I am trying to access the property generated from mmnormalize by using > $!field_name but for some reason I am unable to modify the value, or I > cannot even use some function that are listed on RainerScript. > > Could you please help me figure out how to modify a parse log field? > > Thank you very much in advance. > > > > -- > Sent from: http://rsyslog-users.1305293.n2.nabble.com/ > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
