Le 11 août 2014 09:01, "Gergely Nagy" <algernon@balabit.hu> a écrit :

Balazs Scheidler <bazsi77@gmail.com> writes:

> I would prefer the creation of $(format-gelf) which would solve both the
> NUL issue and makes it easier for someone else to create GELF output.

FWIW, since there is no GELF C library out there, I started hacking on
one (which would also support chunking, and would provide an API we can
plug into LogWriter, so we won't have to make it a
LogThreadedDestDriver). It will take a while to finish it, because I'm
playing with getting the API right.

> Or alternatively, add an option to $(format-json) to add a suffix (and
> perhaps a prefix) in front of and after the resulting string. That would be
> useful for other purposes as well, and then $(format-gelf) could be
> implemented by my latest patches that enable the definition of template
> functions within the configuration file.
>
> E.g.
>
> template-function "format-gelf" "$(format-json --suffix "\x0" <format-json
> arguments to produce gelf>)"
>
> destination d_graylog {
>     network("1.2.3.4" transport(tcp) template("$(format-gelf)"); };
> };

How about $(char 0) as a template function? That can be reused outside
of format-json.

--
|8]
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq