Re: [rsyslog] mmfields is not enough for field extraction.

I don't know if that ever got done. David Lang On Fri, 10 Aug 2018, eSX via rsyslog wrote: Date: Fri, 10 Aug 2018 19:40:35 +0800 From: eSX via rsyslog To: rsyslog-users Cc: eSX Subject: [rsyslog] mmfields is not enough for field extraction. Hi all. I have read the documents of mmfie

[rsyslog] mmfields is not enough for field extraction.

Hi all. I have read the documents of mmfield. And I think it's not enough. There is a typical scenario: Many key-values are concatenated by separator, but not one field only. e.g. key-value pairs are concatenated in url-query mode, like: foo=123=456=bbb==xxx seems there is no way can split them