Re: [rsyslog] Need help with Rsyslog Parser

2023-10-11 Thread David Greig via rsyslog
om: "Gundlapally, Navanitha via rsyslog" > > To: "rsyslog@lists.adiscon.com" > > Cc: "Gundlapally, Navanitha" > > Subject: [rsyslog] Need help with Rsyslog Parser > > > > Hi Team, > > > > I am new to this community and hopi

Re: [rsyslog] Need help with Rsyslog Parser

2023-10-11 Thread David Lang via rsyslog
wrote: Date: Wed, 11 Oct 2023 13:20:57 + From: "Gundlapally, Navanitha via rsyslog" To: "rsyslog@lists.adiscon.com" Cc: "Gundlapally, Navanitha" Subject: [rsyslog] Need help with Rsyslog Parser Hi Team, I am new to this community and hoping to get some

Re: [rsyslog] Need help with Rsyslog Parser

2023-10-11 Thread David Lang via rsyslog
Templates are how you format messages that you are outputting, they have nothing to do with parsing messages. I would first suggest that you log the message with the template RSYSLOG_DebugFormat so that you can see all the variables that get parsed out of the message already, and what is

[rsyslog] Need help with Rsyslog Parser

2023-10-11 Thread Gundlapally, Navanitha via rsyslog
Hi Team, I am new to this community and hoping to get some help with my below query. We are collecting some network logs from client devices to a Syslog collector (A) which is managed by Vendor and the next hop is on the syslog collector (B) managed by us. On Collector B, I see the events are