omjournal: Systemd Journal Output

Module Name:    omjournal

Author:Rainer Gerhards <rgerhards@adiscon.com>

Description:

This module provides native support for logging to the systemd journal.

Action Parameters:

Note: parameter names are case-insensitive.

• template Template to use when submitting messages.

By default, rsyslog will use the incoming %msg% as the MESSAGE field of the journald entry, and include the syslog tag and priority.

You can override the default formatting of the message, and include custom fields with a template. Complex fields in the template (eg. json entries) will be added to the journal as json text. Other fields will be coerced to strings.

Journald requires that you include a template parameter named MESSAGE.

Sample:

The following sample writes all syslog messages to the journal with a custom EVENT_TYPE field.

module(load="omjournal")

template(name="journal" type="list") {
  constant(value="Something happened" outname="MESSAGE")
  property(name="$!event-type" outname="EVENT_TYPE")
}

action(type="omjournal" template="journal")