Rsyslog修剪App-名称超过48个字符

Question

我正在尝试用下面的添加来修剪超过48个额外的字符，但它不起作用。会出什么问题呢？

rsyslog.conf (without change)

$ActionQueueType LinkedList
$ActionQueueFileName srvrfwd
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
$ModLoad imudp #loads the udp module
$UDPServerAddress XX.XX.YY.ZZ
$UDPServerRun 514
*.* @127.0.0.1:6514;RSYSLOG_SyslogProtocol23Format

rsyslog.conf (with addition)

$ActionQueueType LinkedList
$ActionQueueFileName srvrfwd
$ActionResumeRetryCount -1
$ActionQueueSaveOnShutdown on
$ModLoad imudp #loads the udp module
$UDPServerAddress XX.XX.YY.ZZ
$UDPServerRun 514

set $.APPNAME47 = substring($app-name, 0, 47);

template(name="trimmer" type="string"
     string="<%PRI%>1 %TIMESTAMP:::date-rfc3339% %HOSTNAME% %$.APPNAME47% %PROCID% %MSGID% %STRUCTURED-DATA% %msg%\n")

*.* @127.0.0.1:6514;trimmer

Answer 1

这样做效果很好。

template(name="trimmer" type="string" string="<%PRI%>1 %TIMESTAMP:::date-rfc3339% %HOSTNAME% %APP-NAME:1:46% %PROCID% %MSGID% %STRUCTURED-DATA% %msg%\n")

*.* @127.0.0.1:6514;trimmer