[syslog-ng] Structured Data
Balazs Scheidler
bazsi77 at gmail.com
Sun Mar 30 20:52:48 CEST 2014
On the wire or in files? In files, you are jn complete control with the
template option.
On the wire you can set .SDATA.meta.sequenceId to an empty string, that
should drop the sdata if I remember correctly.
But why do you want to do this?
On Mar 27, 2014 6:41 PM, "Ou, Jimmy" <Jimmy.Ou at viasat.com> wrote:
> Hello,
>
>
>
> I am having problem removing the structured data in the syslog message.
>
>
>
> My test logs show the following:
>
> <113>1 2014-11-25T11:00:00+00:00 10.1.1.1 RedBox - - [meta
> sequenceId="16"] @cee:[{"host":"10.1.1.1"}]
>
>
>
> I want it to look like the following without the sequenceId tag:
>
> <113>1 2014-11-25T11:00:00+00:00 10.1.1.1 RedBox - - - at cee:[{"host":"10.1.1.1"}]
>
>
>
> Is there an option to turn this meta data off?
>
>
>
> Thanks,
>
> Jimmy
>
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140330/1bb3a31b/attachment.htm
More information about the syslog-ng
mailing list