14 Oct
2019
14 Oct
'19
8:17 a.m.
On Fri, Oct 11, 2019 at 05:29:54PM +0000, Robert Fekete (rfekete) wrote:
Hi,
Unless you want to do something to the logs outside syslog-ng (that is, after you write the logs to the pipe but before you read them back), there is no need to complicate things like that. You can simply create two log paths, where both log paths read the same source, but one uses the pipe destination, the other one the parser and the file destination. Actually, you can do it with one log path if you use an embedded log statement.
That being said, it would be pretty cool to be able to reinject logs into a source: source s_foo { file("/in"); }; log { source(s_foo); ... destination { reinject(s_foo); }; };