Created
October 6, 2015 23:55
-
-
Save harleypig/c8d3750381cc31eaddac to your computer and use it in GitHub Desktop.
rsyslog json template
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
template(name="client_logfile" type="string" string="/var/log/brokkr/client/client_%msg:R,ERE,1,ZERO:\\[clientid:([0-9]+)\\]--end%.log") | |
template(name="client_msg" type="list" option.json="on") { | |
constant(value="{") | |
property(name="programname" outname="program" format="jsonr") | |
constant(value=",") | |
property(name="rawmsg" outname="msg" format="jsonr") | |
constant(value=",") | |
property(name="syslogseverity-text" outname="severity" format="jsonr") | |
constant(value=",") | |
property(name="syslogtag" outname="tag" format="jsonr") | |
constant(value=",") | |
property(name="timereport" outname="timestamp" format="jsonr") | |
constant(value="}") | |
} | |
local6.* -?client_logfile,client_msg | |
$ rsyslogd -N1 -f extra/brokkr-syslog.conf | |
rsyslogd: version 7.4.7, config validation run (level 1), master config extra/brokkr-syslog.conf | |
rsyslogd: invalid format type 'jsonr' for property | |
rsyslogd: Could not find template 'client_logfile,client_msg' - action disabled [try http://www.rsyslog.com/e/3003 ] | |
rsyslogd: error during parsing file extra/brokkr-syslog.conf, on or before line 30: errors occured in file 'extra/brokkr-syslog.conf' around line 30 [try http://www.rsyslog.com/e/2207 ] | |
rsyslogd: End of config validation run. Bye. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment