yup, earlier it was impossible to represent empty values, now the "unset()" rewrite op can be used to delete name-value pairs, which will not be added to the json output. perhaps an option to get the old behavior back would be possible. (e.g. $(format-json --skip-empty) or something like that.

--
Bazsi

On Fri, Jul 7, 2017 at 9:51 AM, Fekete, Róbert <robert.fekete@balabit.com> wrote:

Hi,

I think that in 3.8 Bazsi separated the states of values, so now there is a difference between nonexisting keys and keys that exist but their value is empty.

On Fri, Jul 7, 2017 at 9:44 AM, Fabien Wernli <wernli@in2p3.fr> wrote:
Hi,

How would you go about dropping keys with empty values?
Or more generally, conditionally select keys depending on their values?

I *think* something changed somewhere between 3.7 and 3.9 as I used to have
no values containing "", and now I do.

Cheers

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq