Mailing List Archive

action if property not set
Is it possible to filter depending on a field that may exists or not in a
json message?
Something like:

# if property is not set
if ! $!source_app then {
action(...)
}
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: action if property not set [ In reply to ]
Found
https://github.com/rsyslog/rsyslog-doc/commit/912bc5dcc54966be2cea9890c81414a1e96a94ce
however it isn't working as expected (or at least how I expect)

On Mon, Mar 6, 2023 at 9:00 AM Tan Mientras <tanimientras@gmail.com> wrote:

> Is it possible to filter depending on a field that may exists or not in a
> json message?
> Something like:
>
> # if property is not set
> if ! $!source_app then {
> action(...)
> }
>
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: action if property not set [ In reply to ]
What do you expect?

Sent from phone, thus brief.

Tan Mientras via rsyslog <rsyslog@lists.adiscon.com> schrieb am Mo., 6.
März 2023, 13:27:

> Found
>
> https://github.com/rsyslog/rsyslog-doc/commit/912bc5dcc54966be2cea9890c81414a1e96a94ce
> however it isn't working as expected (or at least how I expect)
>
> On Mon, Mar 6, 2023 at 9:00 AM Tan Mientras <tanimientras@gmail.com>
> wrote:
>
> > Is it possible to filter depending on a field that may exists or not in a
> > json message?
> > Something like:
> >
> > # if property is not set
> > if ! $!source_app then {
> > action(...)
> > }
> >
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.