[syslog-ng] [Bug 229] New: json parser does not maintain all json object data

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=229

           Summary: json parser does not maintain all json object data
           Product: syslog-ng
           Version: 3.4.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: erempel at uvic.ca
Type of the Report: ---
   Estimated Hours: 0.0


Then the json parser is used

parser p_json {
        json-parser();
};

log {   source(mysource);
        parser(p_json);
        ...
}

tag-value pairs are not maintained if they are ones that are normally populated by syslog-ng.

Even with a source that has flags(no-parse) man macros are populated by syslog-ng

C_*
S_*
R_*
YEAR_DAY
YEAR
WEEKDAY_NAME
WEEK_DAY_ABBREV
WEEK_DAY
WEEKDAY
WEEK
USEC
UNIXTIME
TZOFFSET
TZ
TAGS
SYSUPTIME
STAMP
SEC
MSEC
MONTH_WEEK
MONTH_NAME
MONTH_ABBREV
MONTH
MIN
LOGHOST
ISODATE
HOUR12
HOUR
FULLDATE
DAY
DATE
AMPM

the json parser should populate the macros after the initial population allowing the json data to overwrite/control all of the macros.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.