App parser kill switch

[bazsi]

This patch implements auto-parse(yes/no) option into

• the app-paser()
• and through the use of VARARGS system() and default-network-drivers()

this was requested by @czanik

[kira-syslogng]

Build SUCCESS, the tests were executed on test branch: master and test suite: functions

[bazsi]

With these patches it is not possible to control which applications are processed by auto-parser:

# disable completely
system(auto-parse(no));

# all parsers enabled, except a few
system(auto-parse-exclude("foo,bar,baz"));

# only a few specific are enabled
system(auto-parse-include("foo,bar,baz"));

The same options should work with the default-network-drivers() stuff as well.

[bazsi]

@czanik feedback and testing would be welcome, as always.

[kira-syslogng]

Build SUCCESS, the tests were executed on test branch: master and test suite: functions

[czanik]

I have tried:

system(auto-parse-exclude("iptables"));

And iptables logs were no more parsed, but sudo logs were still parsed.

[czanik]

system(auto-parse-include("iptables"));

also worked fine.

[czanik]

system(auto-parse(no));

also worked fine.

I also did a very basic performance test with the above setting: no measurable difference with the system source. My suspicion is, that the journal() source is the bottleneck here.

[lbudai]

@czanik : thx for feedbacks.