<div dir="ltr">Hi Gergely,<div><br></div><div>This worked. :)</div><div>Thank you very much</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 3, 2015 at 6:11 PM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@madhouse-project.org" target="_blank">algernon@madhouse-project.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">>>>>> "Thanuje" == Thanuje Ashwin Nallaperuma <<a href="mailto:thanuje88@gmail.com">thanuje88@gmail.com</a>> writes:<br>
<br>
Thanuje> I have multiple files with the same content on the syslog-ng client<br>
Thanuje> These files are stored on different locations with the same file name and<br>
Thanuje> same content<br>
Thanuje> After receiving I want to store these files with different names on<br>
Thanuje> sysog-ng server<br>
Thanuje> Is there any way I could use the filepath or filename of the receiving file<br>
Thanuje> as a macro<br>
Thanuje> or any way to achieve this..?<br>
<br>
When sending the message, the $FILE_NAME macro contains the path of the<br>
file. You can add it to the template on the sending end, and extract it<br>
on the receiving end, and use that as you will.<br>
<br>
The easiest way to accomplish this is either $(format-json) (and<br>
json-parser() on the other end), or using RFC 5424 syslog(), and setting<br>
SDATA.filename (or somesuch) to $FILE_NAME in a rewrite rule. That way,<br>
it will be automatically available on the receiving end, and you can<br>
transform them in whatever way you prefer.<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
|8]<br>
</font></span><div class="HOEnZb"><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br></div>