Information: Forum is in read-only mode
For details and other support options see https://www.adiscon.com/news/support-forum-set-to-read-only-mode/

Send some messages to a different table

General discussions here

Moderator: alorbach

Google Ads


Send some messages to a different table

Postby luismg » Sat Jan 27, 2018 7:03 pm

Hello:
I woul like to send traffic that matches some pattern to a different table of the same database
checking rsyslog.conf I don't see the way because it doesn't ask for the table name
*.* :ommysql:127.0.0.1,rsyslogdb,rsyslog,PASSWORD

is that possible?

kind regards
luismg
New
 
Posts: 9
Joined: Fri Nov 25, 2016 9:59 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: Send some messages to a different table

Postby luismg » Sat Jan 27, 2018 10:37 pm

I found the answer

$template StrangeEvents,"insert into StrangeEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values ('%msg%', %syslogfacility%, '%HOSTNAME%', %syslogpriority%, '%timereported:::date-mysql%', '%timegenerated:::date-mysql%', %iut%, '%syslogtag%')",SQL

and filtirng one event
:syslogtag, contains, "-106023" :ommysql:127.0.0.1,db,rsyslog,password;StrangeEvents


thank you!
luismg
New
 
Posts: 9
Joined: Fri Nov 25, 2016 9:59 am

Google Ads



Return to General

Who is online

Users browsing this forum: No registered users and 1 guest

cron