[syslog-ng] How to use parser

大町 靖 ya_omachi at yahoo.co.jp
Tue Feb 7 15:50:04 CET 2012


Hello Experts,

Please let me know how to use parser setting.

This is the syslog message.
Msg1 #AA# Msg2 

I want to divide this message.
I expect the below.
Msg1
Msg2

But It doesn't work well , though I wrote the configuration below.
parser p1{
 csv-parser(columns("Msg1","Msg2")
 delimiters("#AA#")
 template ("$Msg1\n$Msg2");
};
log { source(s_sys); parser(p1); destination(d_mesg); };

I check the output. The result wasn't unexpected.
Msg1 #AA# Msg2 

If my configuration is wrong, please let  me know.

Thanks,
 Yasu
 


More information about the syslog-ng mailing list