[syslog-ng] Can I put all the parsed fields into a destination template?

Balazs Scheidler bazsi at balabit.hu
Wed Dec 21 14:15:10 CET 2011


On Wed, 2011-12-21 at 03:25 -0500, Patrick Hemmer wrote:
> Sent: Wed Dec 21 2011 03:19:38 GMT-0500 (EST)
> From: VÁMOS Balázs <vamos.balazs at zuriel.hu>
> To: syslog-ng at lists.balabit.hu 
> Subject: [syslog-ng] Can I put all the parsed fields into a
> destination template? 
> > Hi,
> > 
> > I would like to forward the parsed fields to LOGalyze in an unstructured
> > way. Is it possible to create a serialized object (JSON or something
> > like that) after parsing message with patterndb?
> Take a look at the format-json function, might be what youre after.
> http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guides/syslog-ng-ose-v3.3-guide-admin-en.html/index.html-single.html#template-function-format-json

Yup, this should be $(format-json).

-- 
Bazsi




More information about the syslog-ng mailing list