Would Host/timestamp interceptors work for you ?
http://flume.apache.org/FlumeUserGuide.html#timestamp-interceptor
-Roshan
On Tue, Oct 16, 2012 at 2:27 PM, Filip Slunecko <filip.slunecko@gmail.com>wrote:
> Hi,
>
> I am trying to use syslog source and sink it to hdfs or fileroller.
> Everything is working, but "saved" logs are without timestamp and
> hostname information.
> Is it possible to force flume-ng to dump those information from syslog
> header togather with body lines?
>
> I am using flume-ng-agent-1.2.0+24.4-1.noarch from Cloudera repository.
>
> Thanks,
>
> Filip
>
|