parsing message in rsyslog configuration

Posted on

Here are my requirements:

Send the vsftpd logs to syslog, and parse and format the data as the following:

<DDMMYYYYhhmmss>:<source_ip>:<ftp_id>:<target_dir>

I have tried to use a script to parse the log but I would like to know if there more efficient way to handle this. I am a newbie to rsyslog.

Currently our rsyslog version is 5.8 in RHEL 6.

My question is:

  1. What is the best version of rsyslog to implement this?
  2. What is the best way to implement the parsing of the message?
KD

Responses