[syslog-ng] about mysql log

[Jacopo Cappelli]

2009/7/6 Balazs Scheidler <bazsi at balabit.hu>:
> On Mon, 2009-07-06 at 11:58 +0200, Jacopo Cappelli wrote:
>> Hi,
>> it's possible to personalize mysql logging?
>> actually i have
>> $HOST,$FACILITY,$PRIORITY,$LEVEL,$TAG,$YEAR-$MONT-$DAY,
>> $HOUR:$MIN:$SEC; $PROGRAM,$MSG
>> i want to decompose $MGS in sub-level field because in $MSG i have a
>> email-id and i use it to make web research.
>
> with syslog-ng 3.0 you can.
>
> you can either parse the message using db-parser(), or csv-parser() (see
> the related blog posts, google will find them)
>
> once your message is parsed, you can reference custom fields in your sql
> destination, thus put any parsed value in a separate SQL column.
>
> --
> Bazsi

parser p_assp {
        csv-parser(columns("ID_MESSAGE","MSG")
        delimiters(" ")
        flags(escape-none)
        template("${HOST}")
        );
};

my $MSG is:
m-1234-5678 <other information of mail delivery>

i want to have a field on mysql named id_message that contain the
message id but i have a difficult to do a parser that do it...

Thanks,
Jacopo


-- 
Linux, Windows Xp ed MS-DOS
(anche conosciuti come il Bello, il Brutto ed il Cattivo).
-- Matt Welsh