Hi Folks,
I'm trying to figure out if there is a way to further parse incoming messages.
Right now I have:
destination db_mysql { pipe("/var/log/mysql.pipe"
template("INSERT INTO logs (host, facility, priority, level, datetime, msg)
VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$MSG' );\n")
template-escape(yes)); };
But I want to take $MSG and parse it into individual tokens.
How can I accomplish this?
Tia!
-Clayton