Rsyslog: omelasticsearch, name of remote log file

[ysfduzgun]

Hi there,

Is there any way to see remote logs file names on elasticsearch with rsyslog-elasticsearch(omelasticsearch).

in fact i need something like this:
constant(value="\",\"filename\":\"") property(name="sourcefile")

[davidelang]

are you asking to see the files pulled in via imfile? if so, you need to turn on
metadata for that input and add it to the template that you are sending to
elasticsearch (probably as a json message)

log the message with the format RSYSLOG_DebugFormat and it will show you all the
variables that you have available.

[rgerhards]

closing due to inactivity

[ysfduzgun]

"RSYSLOG_DebugFormat" works.
I forgat the close issue. Sorry for that. Thank you.

[rgerhards]

No problem at all :-) thx for the confirmation!

[lock[bot]]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.