forked from rsyslog/rsyslog
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathpmrfc3164-defaultTag.sh
executable file
·29 lines (27 loc) · 1.04 KB
/
pmrfc3164-defaultTag.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
#!/bin/bash
# add 2016-11-22 by Pascal Withopf, released under ASL 2.0
. ${srcdir:=.}/diag.sh init
generate_conf
add_conf '
module(load="../plugins/imtcp/.libs/imtcp")
input(type="imtcp" port="0" listenPortFileName="'$RSYSLOG_DYNNAME'.tcpflood_port" ruleset="customparser")
parser(name="custom.rfc3164" type="pmrfc3164" permit.AtSignsInHostname="off"
force.tagEndingByColon="on")
template(name="outfmt" type="string" string="?%hostname%?%syslogtag%?%msg%?\n")
ruleset(name="customparser" parser="custom.rfc3164") {
:hostname, contains, "Hostname" action(type="omfile" template="outfmt" file=`echo $RSYSLOG_OUT_LOG`)
}
'
startup
tcpflood -m1 -M "\"<129>Mar 10 01:00:00 Hostname1 msgnum:1\""
tcpflood -m1 -M "\"<129>Mar 10 01:00:00 Hostname2 msgnum:2\""
tcpflood -m1 -M "\"<129>Mar 10 01:00:00 Hostname3 tag msgnum:3\""
tcpflood -m1 -M "\"<129>Mar 10 01:00:00 Hostname4 tag: msg\""
shutdown_when_empty
wait_shutdown
export EXPECTED='?Hostname1?-? msgnum:1?
?Hostname2?-? msgnum:2?
?Hostname3?-? tag msgnum:3?
?Hostname4?tag:? msg?'
cmp_exact
exit_test