lookup()
Purpose
lookup(table_name_literal_string, key)
Lookup tables are a powerful construct to obtain class information based on message content. It works on top of a data-file which maps key (to be looked up) to value (the result of lookup).
The idea is to use a message properties (or derivatives of it) as an index into a table which then returns another value. For example, $fromhost-ip could be used as an index, with the table value representing the type of server or the department or remote office it is located in.
Read more about it here Lookup Tables
Example
In the following example the hostname is looked up in the given table and the corresponding value is returned.
lookup_table(name="host_bu" file="/var/lib/host_billing_unit_mapping.json")
set $.bu = lookup("host_bu", $hostname);
See also
Help with configuring/using Rsyslog
:
Mailing list - best route for general questions
GitHub: rsyslog source project - detailed questions, reporting issues that are believed to be bugs with
Rsyslog
See also
Contributing to Rsyslog
:
Source project: rsyslog project README.
Documentation: rsyslog-doc project README
Copyright 2008-2023 Rainer Gerhards (Großrinderfeld), and Others.