diff options
| author | Radu Gheorghe <radu.gheorghe@sematext.com> | 2013-01-15 19:30:03 +0200 |
|---|---|---|
| committer | Rainer Gerhards <rgerhards@adiscon.com> | 2013-01-24 04:08:04 +0100 |
| commit | f7debed88d432708109040c7eda8985d4d5f1dc8 (patch) | |
| tree | c11baaabb43c0c1c5aa1173a54b216bf1d09c9e3 | |
| parent | 88020b001b4e0c852bab39ecb63a2d40ed354558 (diff) | |
| download | rsyslog-f7debed88d432708109040c7eda8985d4d5f1dc8.tar.gz rsyslog-f7debed88d432708109040c7eda8985d4d5f1dc8.tar.bz2 rsyslog-f7debed88d432708109040c7eda8985d4d5f1dc8.zip | |
- added $!all-json to property replacer
- specified that $!<name> can be used with CEE-enhanced syslog (once parsed via mmjsonparse)
| -rw-r--r-- | doc/property_replacer.html | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/doc/property_replacer.html b/doc/property_replacer.html index dc09d33c..c7624b2d 100644 --- a/doc/property_replacer.html +++ b/doc/property_replacer.html @@ -228,7 +228,15 @@ for filtering in a generic way)</td> <td>This is the "bridge" to syslog message normalization (via <a href="mmnormalize.html">mmnormalize</a>): name is a name defined inside the normalization rule. It has the value selected by the rule -or none if no rule with this field did match. +or none if no rule with this field did match. You can also use these +properties to specify JSON fields from the CEE-enhanced syslog +message, once you parse it with <a href="mmjsonparse.html">mmjsonparse</a> +</td> +</tr> +<tr> +<td><b>$!all-json</b></td> +<td>This is the JSON part of the CEE-enhanced syslog message, which +can be parsed with <a href="mmjsonparse.html">mmjsonparse</a> </td> </tr> </tbody> |