[syslog-ng] How to use parser

[Fekete Robert]

Hi,

remove the template() option from the parser definition and add it to the 
definition of the destination.

Regards,

Robert

On 02/07/2012 03:50 PM, 大町 靖 wrote:

> Hello Experts,
>
> Please let me know how to use parser setting.
>
> This is the syslog message.
> Msg1 #AA# Msg2
>
> I want to divide this message.
> I expect the below.
> Msg1
> Msg2
>
> But It doesn't work well , though I wrote the configuration below.
> parser p1{
>   csv-parser(columns("Msg1","Msg2")
>   delimiters("#AA#")
>   template ("$Msg1\n$Msg2");
> };
> log { source(s_sys); parser(p1); destination(d_mesg); };
>
> I check the output. The result wasn't unexpected.
> Msg1 #AA# Msg2
>
> If my configuration is wrong, please let  me know.
>
> Thanks,
>   Yasu
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>