SysSock.ParseTrusted

Turns trusted properties into JSON fields when annotation is enabled.

This parameter applies to imuxsock: Unix Socket Input Module.

Name:

SysSock.ParseTrusted

Scope:

module

Type:

boolean

Default:

module=off

Required?:

no

Introduced:

6.5.0

Description

If SysSock.Annotation is turned on, create JSON/lumberjack properties out of the trusted properties (which can be accessed via advanced JSON Variables, e.g. $!pid) instead of adding them to the message.

Added in version 6.5.0: As $SystemLogParseTrusted.

Changed in version 7.2.7: Support for the advanced format was added.

Module usage

module(load="imuxsock" sysSock.parseTrusted="on")

Legacy names (for reference)

Historic names/directives for compatibility. Do not use in new configs. .. _imuxsock.parameter.legacy.systemlogparsetrusted:

  • $SystemLogParseTrusted — maps to SysSock.ParseTrusted (status: legacy)

See also

See also imuxsock: Unix Socket Input Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.