blob: d13b712b9afb9ce55e9203dc4f052b832209466f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
$IncludeConfig diag-common.conf
# Note: we must mess up with the template, because we can not
# instruct ES to put further constraints on the data type and
# values. So we require integer and make sure it is none.
template(name="tpl" type="string"
string="{\"msgnum\":\"x%msg:F,58:2%\"}")
module(load="../plugins/omelasticsearch/.libs/omelasticsearch")
:msg, contains, "msgnum:" action(type="omelasticsearch"
template="tpl"
searchIndex="rsyslog_testbench"
searchType="test-type"
bulkmode="off"
errorFile="./rsyslog.errorfile")
|