CEE/lumberjack JSON support Module (mmjsonparse)

back

# Log Message Normalization Module

Module Name: mmjsonparse

Available since: 6.6.0+

Author: Rainer Gerhards <rgerhards@adiscon.com>

Description:

This module provides support for parsing structured log messages that follow the CEE/lumberjack spec. The so-called "CEE cookie" is checked and, if present, the JSON-encoded structured message content is parsed. The properties are than available as original message properties.

Action specific Configuration Directives:

currently none

Legacy Configuration Directives:

none Caveats/Known Bugs:

None known at this time.

Sample:

This activates the module and applies normalization to all messages:

module(load="mmjsonparse") action(type="mmjsonparse")

The same in legacy format:

$ModLoad mmjsonparse *.* :mmjsonparse:

[rsyslog.conf overview] [manual index] [rsyslog site]

This documentation is part of the rsyslog project.
Copyright © 2012 by Rainer Gerhards and Adiscon. Released under the GNU GPL version 3 or higher.