parsing message in rsyslog configuration

Posted on

Here are my requirements:

Send the vsftpd logs to syslog, and parse and format the data as the following:

<DDMMYYYYhhmmss>:<source_ip>:<ftp_id>:<target_dir>

I have tried to use a script to parse the log but I would like to know if there more efficient way to handle this. I am a newbie to rsyslog.

Currently our rsyslog version is 5.8 in RHEL 6.

My question is:

  1. What is the best version of rsyslog to implement this?
  2. What is the best way to implement the parsing of the message?
KD
Log in to join the conversation
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.