Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Property Replacer plus ("+") sign #3874

Open
claudiu-edi opened this issue Sep 24, 2019 · 0 comments
Open

Property Replacer plus ("+") sign #3874

claudiu-edi opened this issue Sep 24, 2019 · 0 comments

Comments

@claudiu-edi
Copy link

Hello!

I am trying to use the following template:

template(name="extract" type="string" string="%msg:F,9+:3%")

I want to use this to extract the 3rd field from a message with fields delimited by an unknown number of tab characters. However I always get this when testing the config:

rsyslogd: version 8.1908.0, config validation run (level 1), master config /etc/rsyslog.conf
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 9: error: invalid character '+' in frompos after "F,", property: 'msg:F,9+:3%' be sure to use DECIMAL character codes! [v8.1908.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 9: error processing template object [v8.1908.0 try https://www.rsyslog.com/e/2207 ]
rsyslogd: error during parsing file /etc/rsyslog.d/fieldtesting.conf, on or before line 11: exec_template(): template 'extract' could not be found [v8.1908.0 try https://www.rsyslog.com/e/2207 ]

What am I doing wrong? Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant