2009/7/6 Balazs Scheidler <bazsi@balabit.hu>:
On Mon, 2009-07-06 at 11:58 +0200, Jacopo Cappelli wrote:
Hi, it's possible to personalize mysql logging? actually i have $HOST,$FACILITY,$PRIORITY,$LEVEL,$TAG,$YEAR-$MONT-$DAY, $HOUR:$MIN:$SEC; $PROGRAM,$MSG i want to decompose $MGS in sub-level field because in $MSG i have a email-id and i use it to make web research.
with syslog-ng 3.0 you can.
you can either parse the message using db-parser(), or csv-parser() (see the related blog posts, google will find them)
once your message is parsed, you can reference custom fields in your sql destination, thus put any parsed value in a separate SQL column.
-- Bazsi
parser p_assp { csv-parser(columns("ID_MESSAGE","MSG") delimiters(" ") flags(escape-none) template("${HOST}") ); }; my $MSG is: m-1234-5678 <other information of mail delivery> i want to have a field on mysql named id_message that contain the message id but i have a difficult to do a parser that do it... Thanks, Jacopo -- Linux, Windows Xp ed MS-DOS (anche conosciuti come il Bello, il Brutto ed il Cattivo). -- Matt Welsh