[syslog-ng] Tokenizing messages

[Dukes Clayton]

Hi Folks,

I'm trying to figure out if there is a way to further parse incoming
messages.
Right now I have:

destination db_mysql { pipe("/var/log/mysql.pipe" 
 template("INSERT INTO logs (host, facility, priority, level, datetime,
msg) 
 VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL',
'$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$MSG' );\n")
 template-escape(yes)); };


But I want to take $MSG and parse it into individual tokens.
How can I accomplish this?


Tia!
-Clayton

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060512/5a5b9d04/attachment.htm