Parsing exim multiline logs

[Mario Fetka]

is there plugin to parse exim logs.

with the std format where the mail transaction is over more lines 

income

2015-03-25 13:00:32 1Yajz6-0005LP-Gf <=  

then some lines that could be anything

this

2015-03-25 13:08:42 1Yajz6-0005LP-Gf =>

or this

2015-03-25 13:00:49 1Yajz6-0005LP-Gf SMTP error

or .....

then the end of the transaction

2015-03-25 13:16:54 1Yajz6-0005LP-Gf Completed

thx in av

Mario

[Mr. Fiber]

Maybe, using multiline format with regexp or

writing own parser are options.

http://docs.fluentd.org/articles/parser-plugin-overview#built-in-format

I don't know the exim format deeply so I can't judge which is the best...

Masahiro

--
You received this message because you are subscribed to the Google Groups "Fluentd Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fluentd+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.