Create a JSON property which contains the whole message

[rsyslog]

Create a JSON property which contains the whole message

[radu-gheorghe]

Isn't that what !all-json does?

[rgerhards]

No, !all-json is just a legacy way of specifying all JSON message variables. Most importantly, it does not contain the "native" properties, like msg, rawmsg, syslogtag, fromhost, ...

[radu-gheorghe]

Aha, got it now. Thanks for explaining. Big +1 from me to this one :)

[Ralnoc]

So basically this is to create a new property that returns the whole syslog message (including timestamp and other header details?) In JSON format?

[rgerhards]

y...e...s ... if we understand each other correctly... Let's take just three of the native properties:

• msg
• syslogtag
• fromhost

They (and all others) will need to go into a json contains. Probably "native" is a good name. So under native, you'll see a json for msg, syslogtag and fromhost (and all other properties). The idea is that a plugin has the same easy access to message properties as internal plugins have. Of course, this costs performance. But anyone is free to define a custom format (in JSON or whatever else) that exactly matches the need. What I am aiming at is providing the general solution which can be used with the least work to do ... at the price of the highest performance impact, of course ;)

[rgerhards]

Supported starting with rsyslog 8.3.0.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.