Re: [rsyslog] Add the file name to syslog data

com> To: rsyslog-users <rsyslog@lists.adiscon.com> Cc: Joan <aseq...@gmail.com> Subject: Re: [rsyslog] Add the file name to syslog data In my case I switched to rfc5424 precisely for the subsecond timestamps, when agregating data from a lot of places, the messages would get unordered for s

Re: [rsyslog] Add the file name to syslog data

In my case I switched to rfc5424 precisely for the subsecond timestamps, when agregating data from a lot of places, the messages would get unordered for some reason, adding the microsecond fixed all that. Digging in the available choices I amb thinking about two different options: 1) I stumbled

Re: [rsyslog] Add the file name to syslog data

On Fri, 6 Oct 2017, Dave Cottlehuber wrote: at the final destination, I have all that data available and can either use it, or create a template that just writes out a RFC3164 style message with the original message content. Is there any reason why you prefer RFC3164 vs the later RFC5424

Re: [rsyslog] Add the file name to syslog data

On Sun, 1 Oct 2017, at 11:50, David Lang wrote: > any time you have a question like this, first log locally with the format > RSYSLOG_DebugFormat so that you can see exactly what data you have where. > > In this case, you will need to enable metadata in your imfile config, > this will > add the

Re: [rsyslog] Add the file name to syslog data

any time you have a question like this, first log locally with the format RSYSLOG_DebugFormat so that you can see exactly what data you have where. In this case, you will need to enable metadata in your imfile config, this will add the filename (and other information), but it doesn't do this

Re: [rsyslog] Add the file name to syslog data

Thanks for your reply deoren (due to some issue I had to read your mail on the web archive http://rsyslog-users.1305293.n2.nabble.com/Add-the-file-name-to-syslog-data-td7592722.html), your approach is very neat unfortunately I need to send the data both to graylog and syslog-ng. At this point

Re: [rsyslog] Add the file name to syslog data

On 9/28/2017 6:37 AM, Joan via rsyslog wrote: I am using rsylog to read (imfile) some logfiles and forward them to graylog in syslog format RFC5424. I would like to add an attribute with the filename, I explored doing it by modifiing the template (such as this

[rsyslog] Add the file name to syslog data

I am using rsylog to read (imfile) some logfiles and forward them to graylog in syslog format RFC5424. I would like to add an attribute with the filename, I explored doing it by modifiing the template (such as this ).