[syslog-ng] CSV-Parser Conditions

Justin B justinkala at gmail.com
Tue Apr 1 20:10:27 CEST 2014


Hi


can the template function in indent-multi-line be used on custom macros
(macros i defined using a delimiter on the Apache logs.
I see this example in Admin Guide:
  Example 11.6. Using the indent-multi-line template function

The following example writes multi-line messages into a text file.

destination d_file {
        file ("/var/log/messages"
                template("${ISODATE} ${HOST} $(indent-multi-line
${MESSAGE})\n") );
};

But I want to apply on the custom macros not like the $MESSAGE  given in
the example

Thanks
Kaladhar

On Mon, Mar 31, 2014 at 5:34 PM, Balazs Scheidler <bazsi77 at gmail.com> wrote:

> Use two log statements, with filters that control whether a specific
> message us to be parsed or not.
>  On Mar 31, 2014 8:49 PM, "Justin B" <justinkala at gmail.com> wrote:
>
>>  Need information on this.I am using the CSV-PARSER and I want to put a
>> condition that if a column is empty do not apply the CSV-PARSER but write
>> the line.
>> Primarily i get the application logs and i dont want to apply the
>> CSV-Parser on those log lines where the whole error stack is there.
>> Can someone help on this??
>>
>> --
>> Kaladhar
>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>


-- 
Kaladhar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140401/a3183d6c/attachment.htm 


More information about the syslog-ng mailing list