Ask questions. Get answers. Find technical product solutions from passionate experts in the NXLog community.
Mimic rsyslog output on Ubuntu
bbach created
Using nxlog in front of logstash on a server. On the same user, I want to use nxlog to replace rsyslog. Seems pretty simple. The only issue is the file format is slightly different than the what rsyslog outputs. I see:
<78>May 6 13:50:01 CRON[19454]: (root) CMD ( /opt/observium/discovery.php -h new >> /dev/null 2>&1)
vs:
Jul 16 18:00:01 monitor01 CRON[6871]: (root) CMD ( /opt/observium/poller-wrapper.py 16 >> /dev/null 2>&1)
Main difference is the <NN> at the beginning of the line and the missing hostname (monitor01). Here is my .conf:
<Input in_uds>
Module im_uds
UDS /dev/log
</Input>
<Input in_kernel>
Module im_kernel
</Input>
<Output out>
Module om_file
File "/var/log/syslog"
</Output>
<Route local_route>
Path in_uds, in_kernel => out
</Route>
Is there a simple change I can make to get the desired format? Thanks. -- Bud
bbach created