Mailing List Archive

howto populate structured data in RFC5424 format
Rainer, we finally have someone who is trying to output RFC5424 structured data
to something else that is needing a specific value in that data.

Is there a variable that can be set and then output with a standard template? or
would they need to define a new template?

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: howto populate structured data in RFC5424 format [ In reply to ]
I need to check -- too much time since I worked on that the last time.
Please ping me if I did not reply by Monday.

Rainer

El vie., 21 feb. 2020 a las 7:37, David Lang via rsyslog
(<rsyslog@lists.adiscon.com>) escribió:
>
> Rainer, we finally have someone who is trying to output RFC5424 structured data
> to something else that is needing a specific value in that data.
>
> Is there a variable that can be set and then output with a standard template? or
> would they need to define a new template?
>
> David Lang
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: howto populate structured data in RFC5424 format [ In reply to ]
should have checked the doc first. Here it is:

https://www.rsyslog.com/doc/v8-stable/configuration/modules/mmpstrucdata.html

Rainer

El vie., 21 feb. 2020 a las 8:49, Rainer Gerhards
(<rgerhards@hq.adiscon.com>) escribió:
>
> I need to check -- too much time since I worked on that the last time.
> Please ping me if I did not reply by Monday.
>
> Rainer
>
> El vie., 21 feb. 2020 a las 7:37, David Lang via rsyslog
> (<rsyslog@lists.adiscon.com>) escribió:
> >
> > Rainer, we finally have someone who is trying to output RFC5424 structured data
> > to something else that is needing a specific value in that data.
> >
> > Is there a variable that can be set and then output with a standard template? or
> > would they need to define a new template?
> >
> > David Lang
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: howto populate structured data in RFC5424 format [ In reply to ]
Hi All,

Thanks for the quick response and support. Will try the document instruction and get back to you..


Amila.
________________________________
From: rsyslog <rsyslog-bounces@lists.adiscon.com> on behalf of Rainer Gerhards via rsyslog <rsyslog@lists.adiscon.com>
Sent: 21 February 2020 13:26
To: rsyslog-users <rsyslog@lists.adiscon.com>
Cc: Rainer Gerhards <rgerhards@hq.adiscon.com>
Subject: Re: [rsyslog] howto populate structured data in RFC5424 format

should have checked the doc first. Here it is:

https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rsyslog.com%2Fdoc%2Fv8-stable%2Fconfiguration%2Fmodules%2Fmmpstrucdata.html&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=7pfyMmdN%2BLepJB5M%2B9y75gy7KMn%2FQXHEhvkXMPsRvGE%3D&amp;reserved=0

Rainer

El vie., 21 feb. 2020 a las 8:49, Rainer Gerhards
(<rgerhards@hq.adiscon.com>) escribi?:
>
> I need to check -- too much time since I worked on that the last time.
> Please ping me if I did not reply by Monday.
>
> Rainer
>
> El vie., 21 feb. 2020 a las 7:37, David Lang via rsyslog
> (<rsyslog@lists.adiscon.com>) escribi?:
> >
> > Rainer, we finally have someone who is trying to output RFC5424 structured data
> > to something else that is needing a specific value in that data.
> >
> > Is there a variable that can be set and then output with a standard template? or
> > would they need to define a new template?
> >
> > David Lang
> > _______________________________________________
> > rsyslog mailing list
> > https://apc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.adiscon.net%2Fmailman%2Flistinfo%2Frsyslog&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=IPh1GqV4lv%2FZlk0XTpNcdWIldwnn%2F0cs%2B%2BTWbFoW5gE%3D&amp;reserved=0
> > https://apc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rsyslog.com%2Fprofessional-services%2F&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=Hi9gmlgD7eHhfb8CVx8A1QcNPoNQLYR2nsbr%2BfQrvsU%3D&amp;reserved=0
> > What's up with rsyslog? Follow https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Frgerhards&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=sM8ZHNOnvBtazjgezZ7lGZ36ihXG7G%2BWyM01nimgeXE%3D&amp;reserved=0
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://apc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Flists.adiscon.net%2Fmailman%2Flistinfo%2Frsyslog&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=IPh1GqV4lv%2FZlk0XTpNcdWIldwnn%2F0cs%2B%2BTWbFoW5gE%3D&amp;reserved=0
https://apc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rsyslog.com%2Fprofessional-services%2F&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=Hi9gmlgD7eHhfb8CVx8A1QcNPoNQLYR2nsbr%2BfQrvsU%3D&amp;reserved=0
What's up with rsyslog? Follow https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Frgerhards&amp;data=01%7C01%7Camila.dias%40quantei.com%7C94f6182c78c345330dab08d7b6a3b7a1%7C75398b6e83a24926ba37e090ca2d2539%7C0&amp;sdata=sM8ZHNOnvBtazjgezZ7lGZ36ihXG7G%2BWyM01nimgeXE%3D&amp;reserved=0
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.