[syslog-ng] Program() in destination driver not working for Macros defined in CSV-PARSER

Balazs Scheidler bazsi77 at gmail.com
Fri Mar 7 07:32:11 CET 2014


What do you get in your script? Empty fields?

The program destination has to be on a direct log path subsequent to the
parser.
On Mar 4, 2014 7:27 PM, "Justin B" <justinkala at gmail.com> wrote:

>
> Hello
>
> On My Apache logs I applied csv_parser() and defined the Macros.
>  parser p_apache {
> csv-parser(columns("apache.ETSTAMP", "apache.TYPE",
> "apache.EHOSTNAME","apache.ESOURCE", "apache.EOUTCOME",
> "apache.EMSG","apache.EUSERID")
> delimiters("|")  );
> };
>
> I want to launch a script whenever the UDP messages are in.So I defined the
>
>  destination d_mesg (program("/tmp/test.sh"
> template("|${apache.ETSTAMP}|${apache.TYPE}|${apache.EHOSTNAME}|${apache.ESOURCE}|${apache.EOUTCOME}|${apache.EMSG}|${apache.EUSERID}\n"));
> };
>
> script is working fine with other destination drivers. Please help
> --
> Kale
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140307/7e6f9e10/attachment.htm 


More information about the syslog-ng mailing list