1
response

Hi, I have a system that produces logs files. I send them via tcp to specific port. 

Directory path with logs looks like: 

C:\Logs\<ID>\*.log

Where ID is the unique 3-digit identifier. How to get this ID and send it with every log event?

My current config: 

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Input logs>  
    Module    im_file
    File    'C:\\Logs\\*\\*.log'
    ReadFromLast True
    SavePos True
    Recursive True
    Exec    if $raw_event =~ /^#/ drop();
</Input> 

<Processor buffer_logs>
    Module      pm_buffer
    MaxSize    102400
    Type    Mem
    WarnLimit    51200
</Processor>

<Output out_logs>  
    Module  om_tcp
    Host    localhost
    Port    10010
    OutputType  LineBased
</Output> 

<Route r_logs>  
    Path    logs => buffer_logs => out_logs
</Route>

 

AskedDecember 8, 2015 - 11:27am

Answer (1)

You can add something like this to 'logs':

Exec if ( file_name() =~ /([^\]+)\\.log$/ ) {\
  $raw_event = $raw_event + " " + $1; \
}

Not sure if the regexp works but it should give you the idea. Also not sure whether you want it appended to the end of the line or how you want that transferred.