what you could do is to use the replace function to replace the $ with some other character

set $.msgcopy = replace($msg, "$", "_");

then you can use mmnormalize to parse $.msgcopy with a rule like rule=:%.:json% (I don't remember if mmjsonparse got the ability to parse other variables or if it's a matter of moving to the more general mmnormalize

David Lang
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to