<p dir="ltr">Hi,</p>
<p dir="ltr">Date conversion is not possible at the moment I'm afraid.</p>
<div class="gmail_quot<blockquote class=" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="background:#e7eaef;font-size:9.0pt;font-family:"Verdana","sans-serif"">Hi,<span> </span></span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif""><br>
<span style="background:#e7eaef">I have a non-standard (not rfc 5414) log message format coming into syslog-ng client. I am trying to use csv-parser to parse into custom macros and send it off to syslog-ng host in the correct format.<span> </span></span><br>
<br>
<span style="background:#e7eaef">With no-parse option, how do I make syslog-ng handle this incoming timestamp: [July 30, 2013 10:19:06 AM] ? It would be so much easier to simply use the timestamp for the time message received in syslog-ng (e.g $DATE marco)
but I have to extract the timestamp from the message itself somehow.<span> </span></span><br>
<br>
<span style="background:#e7eaef">Example: [July 30, 2013 10:19:06 AM EDT] DisplayType=CLEAR ClassName=Host....<span> </span></span><br>
<br>
<span style="background:#e7eaef">Secondly, the documentation of syslog-ng seems to hint that I can use string delimiter in parser. "Currently only the csv-parser is implemented, which can separate<span> </span><strong><span style="font-family:"Verdana","sans-serif"">columns
based on delimiter characters and strings."</span></strong><span> </span>but it also says that "<strong><span style="font-family:"Verdana","sans-serif"">If you specify multiple characters, every character will be treated as a
delimiter."</span></strong><span> </span>. Is there a way for me to use a string, not single characters, as delimiters in csv-parser?</span><br>
<br>
<span style="background:#e7eaef">Thanks.</span></span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p><hr size="1"></p>
<p><strong><font color="green">Please consider the environment before printing this email.</font></strong></p>
<p><strong>Visit our website at <a href="http://www.nyse.com" target="_blank">http://www.nyse.com</a> <br>
*****************************************************************************
<br>
Note: The information contained in this message and any attachment to it is privileged, confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to the message, and please delete it from your system. Thank you. NYSE Euronext.
</strong></p></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></div>