[syslog-ng] Cyxtera json file and syslog-ng

Garcia, Julio (InfoSec) julgarcia at corelogic.com
Thu Dec 20 19:49:22 UTC 2018

Like this? 

I changed this:
parser p_json { json-parser (prefix(".json.")); };

To this: 
parser p_json { json-parser(); };

Thank you, 

Julio Garcia
Pro, Information Security Engineer

Direct (949) 214-1284
Mobile (714) 474-5254
julgarcia at corelogic.com 

corelogic.com <http://www.corelogic.com/> |  Blog <http://www.corelogic.com/blog/default.aspx> 
LinkedIn <http://www.linkedin.com/company/corelogic>  |  Twitter <http://twitter.com/corelogicinc> |  Facebook <http://www.facebook.com/CoreLogic>  |  Google+ <https://plus.google.com/114618839782139347829> 

Our Vision: Deliver unique property-level insights that power the global real estate economy

´╗┐On 12/20/18, 11:38 AM, "syslog-ng on behalf of Fabien Wernli" <syslog-ng-bounces at lists.balabit.hu on behalf of wernli at in2p3.fr> wrote:

    [External Content] This message is from an external source. Please exercise caution when opening attachments or links.
    Hi Julio,
    Just remove the `prefix` option from `json-parser()`
    Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
    Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
    FAQ: http://www.balabit.com/wiki/syslog-ng-faq

This message may contain confidential or proprietary information intended only for the use of the 
addressee(s) named above or may contain information that is legally privileged. If you are 
not the intended addressee, or the person responsible for delivering it to the intended addressee, 
you are hereby notified that reading, disseminating, distributing or copying this message is strictly 
prohibited. If you have received this message by mistake, please immediately notify us by  
replying to the message and delete the original message and any copies immediately thereafter. 

Thank you. 

More information about the syslog-ng mailing list