I need to append a hostname to the beginning of the raw log because the log that is being transferred does not show the host who is forwarding the log. I need to add a hostname to identify the log is being forwarded.

Here is the output. How do I add the hostname?

<Input internal>
Module im_internal
Exec $Message = to_json();

<Input cs>
Module im_file
File 'C:\fdr\out\data\*.json'
CloseWhenIdle TRUE
DirCheckInterval 300
Recursive TRUE
ReadFromLast FALSE
file_remove(file_name ());


AskedSeptember 17, 2021 - 9:40pm

Answer (1)