<p dir="ltr">Well, you should extract the csv fields first, and then have that parsed via csvparser.</p>
<div class="gmail_quote">On Apr 1, 2014 8:13 PM, "Justin B" <<a href="mailto:justinkala@gmail.com">justinkala@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>Primarily what I am trying to achieve is I apply CSV-PARSER on the apache logs and separate into custom macros .One of the column contains the Application supplied message which might contain the whole error stack. i want those error stack lines not to be parsed by CSV-PARSER but left overas it is.</div>
<div> </div>
<div>Can you provide the Example as well.</div>
<div>Thank you and highly appreciate your help<br><br></div>
<div class="gmail_quote">On Tue, Apr 1, 2014 at 2:10 PM, Justin B <span dir="ltr"><<a href="mailto:justinkala@gmail.com" target="_blank">justinkala@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div>Hi</div>
<div> </div>
<div> </div>
<div><font face="Courier New">can the template function in indent-multi-line be used on custom macros (macros i defined using a delimiter on the Apache logs.</font></div>
<div><font face="Courier New">I see this example in Admin Guide:</font></div>
<div>
<table border="0" summary="Example: Using the indent-multi-line template function">
<tbody>
<tr>
<th align="left">Example 11.6. Using the indent-multi-line template function</th></tr>
<tr>
<td valign="top" align="left">
<p>The following example writes multi-line messages into a text file.</p><pre>destination d_file {
file ("/var/log/messages"
template("${ISODATE} ${HOST} $(indent-multi-line ${MESSAGE})\n") );
};</pre></td></tr></tbody></table></div>
<div>But I want to apply on the custom macros not like the $MESSAGE given in the example </div>
<div> </div>
<div>Thanks</div>
<div>Kaladhar</div>
<div>
<div>
<div><br></div>
<div class="gmail_quote">On Mon, Mar 31, 2014 at 5:34 PM, Balazs Scheidler <span dir="ltr"><<a href="mailto:bazsi77@gmail.com" target="_blank">bazsi77@gmail.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<p dir="ltr">Use two log statements, with filters that control whether a specific message us to be parsed or not.<br></p>
<div class="gmail_quote">
<div>
<div>On Mar 31, 2014 8:49 PM, "Justin B" <<a href="mailto:justinkala@gmail.com" target="_blank">justinkala@gmail.com</a>> wrote:<br type="attribution"></div></div>
<blockquote style="BORDER-LEFT:#ccc 1px solid;MARGIN:0px 0px 0px 0.8ex;PADDING-LEFT:1ex" class="gmail_quote">
<div>
<div>
<div>Need information on this.I am using the CSV-PARSER and I want to put a condition that if a column is empty do not apply the CSV-PARSER but write the line.</div>
<div>Primarily i get the application logs and i dont want to apply the CSV-Parser on those log lines where the whole error stack is there.</div>
<div>Can someone help on this??<br clear="all"><br>-- <br>Kaladhar </div><br></div></div>______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br><br></blockquote></div><br>______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br><br></blockquote></div><br><br clear="all"><br></div></div><span><font color="#888888">-- <br>Kaladhar </font></span></blockquote></div><br><br clear="all"><br>-- <br>Kaladhar
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>