Yes Empty Fields.

 

I am using this log path

log { source (remote); filter (f_messages); parser (p_apache);destination (r_messages);   };

 

 

Are you saying the I cannot pass the Macro values to a shell script through Program on destination driver??

On Fri, Mar 7, 2014 at 2:47 PM, Evan Rempel <erempel@uvic.ca> wrote:

My recollection is that macros are not expanded for program names. Whant you get is the environment variables from
the shell that is used to start your program, so in most cases this will be empty.

I think this is dangerous and did mantion it on the list previously.

On 03/06/2014 10:32 PM, Balazs Scheidler wrote:
> What do you get in your script? Empty fields?
>
> The program destination has to be on a direct log path subsequent to the parser.
>

> On Mar 4, 2014 7:27 PM, "Justin B" <justinkala@gmail.com <mailto:justinkala@gmail.com>> wrote:
>
>
>     Hello
>     On My Apache logs I applied csv_parser() and defined the Macros.
>       parser p_apache {
>     csv-parser(columns("apache.ETSTAMP", "apache.TYPE", "apache.EHOSTNAME","apache.ESOURCE", "apache.EOUTCOME", "apache.EMSG","apache.EUSERID")
>     delimiters("|")  );
>     };
>     I want to launch a script whenever the UDP messages are in.So I defined the
>       destination d_mesg (program("/tmp/test.sh" template("|${apache.ETSTAMP}|${apache.TYPE}|${apache.EHOSTNAME}|${apache.ESOURCE}|${apache.EOUTCOME}|${apache.EMSG}|${apache.EUSERID}\n")); };
>     script is working fine with other destination drivers. Please help
>     --
>     Kale
>
>     ______________________________________________________________________________
>     Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>     Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
>     FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>

--
Evan Rempel                                      erempel@uvic.ca
Senior Systems Administrator                        250.721.7691
Data Centre Services, University Systems, University of Victoria

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq