You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using the remote syslog plugin, it injects a new timestamp, a new tag (fluentd by default) and the hostname fields.
My understanding is as follows:
the timestamp is for the time the event is forwarded by the Syslog Server to the Remote Syslog server
the tag is fluentd, by default
the hostname is the syslog server forwarding the events to this Remote Syslog Server
Is there a way to strip / transform the record at the Remote Syslog Server ?
So for instance, I'd like to remove the fluentd tag. I'd like the timestamp and host to match what is in the body of the message.
Please refer to the screenshot below. I'd like to get rid of the items in red and use the items in green instead.
When using the remote syslog plugin, it injects a new timestamp, a new tag (fluentd by default) and the hostname fields.
My understanding is as follows:
timestamp
is for the time the event is forwarded by the Syslog Server to the Remote Syslog servertag
is fluentd, by defaulthostname
is the syslog server forwarding the events to this Remote Syslog ServerIs there a way to strip / transform the record at the Remote Syslog Server ?
So for instance, I'd like to remove the
fluentd
tag. I'd like the timestamp and host to match what is in the body of the message.Please refer to the screenshot below. I'd like to get rid of the items in red and use the items in green instead.
My config is as follows:
The output as received by Kiwi Syslog is as shown -
Any inputs / suggestions / recommendations are welcome.
The text was updated successfully, but these errors were encountered: