doc/mmcount.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html><head>
<meta http-equiv="Content-Language" content="en">
<title>mmcount</title></head>

<body>
<a href="rsyslog_conf_modules.html">back</a>

<h1>mmcount</h1>
<p><b>Module Name:&nbsp;&nbsp;&nbsp; mmcount</b></p>
<p><b>Author: </b>Bala.FA &lt;barumuga@redhat.com&gt;</p>
<p><b>Status: </b>Non project-supported module - contact author
or rsyslog mailing list for questions
<p><b>Available since</b>: 7.5.0</p>
<p><b>Description</b>:</p>
<p>
<pre>
    mmcount: message modification plugin which counts messages
    
    This module provides the capability to count log messages by severity
    or json property of given app-name.  The count value is added into the
    log message as json property named 'mmcount'
    
    Example usage of the module in the configuration file
    
     module(load="mmcount")
    
     # count each severity of appname gluster
     action(type="mmcount" appname="gluster")
    
     # count each value of gf_code of appname gluster
     action(type="mmcount" appname="glusterd" key="!gf_code")
    
     # count value 9999 of gf_code of appname gluster
     action(type="mmcount" appname="glusterfsd" key="!gf_code" value="9999")
    
     # send email for every 50th mmcount
     if $app-name == 'glusterfsd' and $!mmcount <> 0 and $!mmcount % 50 == 0 then {
        $ActionMailSMTPServer smtp.example.com
        $ActionMailFrom rsyslog@example.com
        $ActionMailTo glusteradmin@example.com
        $template mailSubject,"50th message of gf_code=9999 on %hostname%"
        $template mailBody,"RSYSLOG Alert\r\nmsg='%msg%'"
        $ActionMailSubject mailSubject
        $ActionExecOnlyOnceEveryInterval 30
        :ommail:;RSYSLOG_SyslogProtocol23Format
     }
</pre>

<p>[<a href="rsyslog_conf.html">rsyslog.conf overview</a>] [<a href="manual.html">manual 
index</a>] [<a href="http://www.rsyslog.com/">rsyslog site</a>]</p>
<p><font size="2">This documentation is part of the
<a href="http://www.rsyslog.com/">rsyslog</a> project.<br>
Copyright &copy; 2008-2013 by <a href="http://www.gerhards.net/rainer">Rainer Gerhards</a> and
<a href="http://www.adiscon.com/">Adiscon</a>. Released under the GNU GPL 
version 3 or higher.</font></p>

</body></html>