<div dir="auto">Submit it as a pr, it looks good to me and makes perfect sense.</div><div class="gmail_extra"><br><div class="gmail_quote">On Jun 20, 2017 17:01, "Czanik, Péter" <<a href="mailto:peter.czanik@balabit.com">peter.czanik@balabit.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi,<br><br></div>I ran into a situation, that an apache access log message arrives as a field in a CSV file. Rigth now the apache-accesslog-parser is always run on the MESSAGE template, but in this case I'd need to run this parser on csv.apache instead of MESSAGE.<br><br></div>What do you think about the following change? It would keep the default behavior but enable me to use a different a template.<br><br></div>Bye,<br></div>CzP<br><div><div><div><div><br>linux-pzl9:/usr/share/syslog-<wbr>ng/include/scl/apache # diff -u /root/syslog-ng/scl/apache/<wbr>apache.conf apache.conf <br>--- /root/syslog-ng/scl/apache/<wbr>apache.conf    2017-06-19 13:47:20.044547152 +0200<br>+++ apache.conf    2017-06-20 16:51:06.740528980 +0200<br>@@ -19,7 +19,7 @@<br> # COPYING for details.<br> #<br> #############################<wbr>##############################<wbr>##################<br>-block parser apache-accesslog-parser(<wbr>prefix(".apache.")) {<br>+block parser apache-accesslog-parser(<wbr>prefix(".apache.") template("${MESSAGE}")) {<br> <br> <br>     channel {<br>@@ -29,6 +29,7 @@<br>                 dialect(escape-double-char)<br>                 flags(strip-whitespace)<br>                 delimiters(" ")<br>+                template(`template`)<br>                 quote-pairs('""[]')<br>                 # field names match of that of Logstash<br>                 columns("clientip", "ident", "auth",<br><br><br clear="all"><div><div><div class="m_1539573634589182747gmail_signature"><div dir="ltr"><div>Peter Czanik (CzP) <<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>><br>Balabit / syslog-ng upstream<br><a href="https://www.balabit.com/blog/author/peterczanik/" target="_blank">https://www.balabit.com/blog/<wbr>author/peterczanik/</a><br><a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a></div></div></div></div>
</div></div></div></div></div></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div></div>