Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

syslog input should allow parsing of custom tags #8307

Closed
vjsamuel opened this issue Sep 13, 2018 · 2 comments
Closed

syslog input should allow parsing of custom tags #8307

vjsamuel opened this issue Sep 13, 2018 · 2 comments
Labels
enhancement Filebeat Filebeat needs_team Indicates that the issue/PR needs a Team:* label Stalled

Comments

@vjsamuel
Copy link
Contributor

Currently we dont have support for parsing custom tags for a template like so:

$template FooFormat, "<%pri%>%timestamp% %HOSTNAME% %syslogtag% [sherlock@8384 id=\"<some id>\" namespace=\"<some namespace>\" appname=\"some app\"] %msg%"\n

It would be great if we are able to extract: id, namespace and appname and add them to the syslog MapStr

The only alternative today is to use dissect

@botelastic
Copy link

botelastic bot commented Jul 9, 2020

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@botelastic botelastic bot added Stalled needs_team Indicates that the issue/PR needs a Team:* label labels Jul 9, 2020
@botelastic
Copy link

botelastic bot commented Jul 9, 2020

This issue doesn't have a Team:<team> label.

@botelastic botelastic bot closed this as completed Aug 8, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Filebeat Filebeat needs_team Indicates that the issue/PR needs a Team:* label Stalled
Projects
None yet
Development

No branches or pull requests

2 participants