[syslog-ng] Is it possible to append a new jSON field?

Jorge Pereira jpereiran at gmail.com
Sun Sep 4 02:42:21 CEST 2016


Hi team,

   Currently, I receive a jSON log from X, but I would like to append a new
field. is it possible?

e.g: I am trying to do something like:

log {
    source {
      file("/var/log/app.jsonlog"
        program_override("ng_app")
        follow_freq(1)
        flags(no-parse)
        template("$(format-json --pair newfield=\"value\")");
      );
    };

    destination(d_remote_collector);
};
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160903/590f46be/attachment.htm 


More information about the syslog-ng mailing list