Rsyslog custom app parsing

General support questions
Post Reply
prologas
Posts: 31
Joined: 2017/03/08 16:48:02

Rsyslog custom app parsing

Post by prologas » 2017/04/25 08:03:15

Hello,

I am trying to use rsyslog functionality to achieve logging severity of custom APP. My app log has a tag of DEBUG/INFO/ERROR so I am trying to set this by searching a string, but with no luck. Anyone experienced something similar ?

$ModLoad imfile

$InputFileName /opt/wildfly/standalone/log/server.log
$InputFileTag test-wildfly-server
$InputFileStateFile test-wildfly-server
$InputFileFacility local6
$InputRunFileMonitor
$InputFilePersistStateInterval 1000
if $syslogfacility-text == 'local6' and $msg contains 'WARN' then $InputFileSeverity == 'warning';@myremoteip:5140
if $syslogfacility-text == 'local6' and $msg contains 'INFO' then $InputFileSeverity == 'info';@myremoteip:5140
if $syslogfacility-text == 'local6' and $msg contains 'ERROR' then $InputFileSeverity == 'error';@myremoteip:5140

Post Reply