Lukasz Przenioslo
28 discussion posts
Hello,
I own a Logfusion licence for a while now, but each time I tried to use it, I somehow wasn;t able to figure out how to configure the parsing for the created columns... I was wondering whether someone more proficcient would know how to create a config for journalctl log parsing, where the following columns are made:
Date and time.
Host.
Log source.
Log message.
Exemplary log line:
Aug 15 00 55:36 abc xyz[301]: EID=24, ComponentIndex=1, Offset=6714368, Length=4096
The separations are made with spaces, which are also included in the date.
I would appreciate all help.
Lukasz Przenioslo
28 discussion posts
Hi and thank you for the answer.
Yes, this feature would be really great. The issue with basic separation is that not many traces use them this way. What would be something worth considering, is separating based on the number of characters, as traces headers often have a fixed number of these.
But regex would probably take care of that too, thank you!
