You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I want to use this to extract the 3rd field from a message with fields delimited by an unknown number of tab characters. However I always get this when testing the config:
rsyslogd: version 8.1908.0, config validation run (level 1), master config /etc/rsyslog.conf
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 9: error: invalid character '+' in frompos after "F,", property: 'msg:F,9+:3%' be sure to use DECIMAL character codes! [v8.1908.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 9: error processing template object [v8.1908.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 11: exec_template(): template 'extract' could not be found [v8.1908.0 try https://www.rsyslog.com/e/2207 ]
What am I doing wrong? Thanks!
The text was updated successfully, but these errors were encountered:
Hello!
I am trying to use the following template:
template(name="extract" type="string" string="%msg:F,9+:3%")
I want to use this to extract the 3rd field from a message with fields delimited by an unknown number of tab characters. However I always get this when testing the config:
What am I doing wrong? Thanks!
The text was updated successfully, but these errors were encountered: