diff options
-rw-r--r-- | doc/imjournal.html | 36 |
1 files changed, 19 insertions, 17 deletions
diff --git a/doc/imjournal.html b/doc/imjournal.html index 4095dba2..1e82f7f1 100644 --- a/doc/imjournal.html +++ b/doc/imjournal.html @@ -65,18 +65,6 @@ ratelimit.interval interval. For futher information, see description there. </ul> -<p><b>Legacy Configuration Directives</b>:</p> -<ul> -<li>$imjournalPersistStateInterval <Delimiter><br> -Equivalent to: ratelimit.PersistStateInterval</li> -<li>$imjournalStateFile <Delimiter><br> -Equivalent to: ratelimit.StateFile</li> -<li>$imjournalRatelimitInterval <Delimiter><br> -Equivalent to: ratelimit.interval</li> -<li>$imjournalRatelimitBurst <Delimiter><br> -Equivalent to: ratelimit.burst</li> -</ul> - <b>Caveats/Known Bugs:</b> <p> <ul> @@ -87,17 +75,31 @@ control of the rsyslog team. </p> <p><b>Sample:</b></p> <p> -The following example shows pulling structured imjournal messages and saving them into /var/log/ceelog +The following example shows pulling structured imjournal messages and saving them into /var/log/ceelog. </p> -<textarea rows="11" cols="60"> +<textarea rows="11" cols="80"> module(load="imjournal" PersistStateInterval="100" StateFile="/path/to/file") #load imjournal module module(load="mmjsonparse") #load mmjsonparse module for structured logs -$template CEETemplate,"%TIMESTAMP% %HOSTNAME% %syslogtag% @cee: %$!all-json%\n" #template for messages +template(name="CEETemplate" type="string" + string="%TIMESTAMP% %HOSTNAME% %syslogtag% @cee: %$!all-json%\n" + ) #template for messages -*.* :mmjsonparse: -*.* /var/log/ceelog;CEETemplate +action(type="mmjsonparse") +action(type="omfile" file="/var/log/ceelog" template="CEETemplate") </textarea> +<p><b>Legacy Configuration Directives</b>:</p> +<ul> +<li>$imjournalPersistStateInterval <Delimiter><br> +Equivalent to: ratelimit.PersistStateInterval</li> +<li>$imjournalStateFile <Delimiter><br> +Equivalent to: ratelimit.StateFile</li> +<li>$imjournalRatelimitInterval <Delimiter><br> +Equivalent to: ratelimit.interval</li> +<li>$imjournalRatelimitBurst <Delimiter><br> +Equivalent to: ratelimit.burst</li> +</ul> + </body> </html> |