MonitorWare Knowledge Base

Hello,
i start new with rsyslog and log to a database(postgresql)
The normal logging from the mail-server runs well, but from the firewall there is an issue with the line splitting
I use the default-setting(no special template) for insert into the database.

Here is on line as text-log

2008-07-19T11:10:07+02:00 FW1 src="62.215.144.191: 1860" dst="10.1.0.244:34217" msg="Traffic Log" note="Traffic Log" devID="0019CB7F2A24" cat="Traffic Log" duration=7 send=1291 rcvd=416 dir="WAN:LAN" protoID=6 proto="others" trans="Normal"

the problem is, it splitt's the line on spaces, so i have the "src" only as fragment in the syslogtag-field src="62.215.144.191:
an the rest in the message-field.

How can i avoid this? Or better, how split every part to insert in a extra table for analysing.

Regads,
Ingo Thierack

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?