Processing Ajax...

Title

Message

Confirm

Confirm

Confirm

Confirm

Are you sure you want to delete this item?

Confirm

Are you sure you want to delete this item?

User Image
Lukasz Przenioslo
28 discussion posts
Hello,
I own a Logfusion licence for a while now, but each time I tried to use it, I somehow wasn;t able to figure out how to configure the parsing for the created columns... I was wondering whether someone more proficcient would know how to create a config for journalctl log parsing, where the following columns are made:

Date and time.
Host.
Log source.
Log message.

Exemplary log line:

Aug 15 00 55:36 abc xyz[301]: EID=24, ComponentIndex=1, Offset=6714368, Length=4096

The separations are made with spaces, which are also included in the date.
I would appreciate all help.
Oct 27, 2023  • #1
Keith Lammers (BFS)'s profile on WallpaperFusion.com
The column parser is really basic, it basically just looks for the separator character(s) you specify and then does a split on that. This journalctl log line isn't really great for that because it's just using spaces, and as you mentioned, some of the fields you want to break out into columns have spaces in them as well.

I think to do this LogFusion would need to support RegEx for column separators. I'm not sure how feasible that is to add, but I've put it on our feature request list :)

Thanks!
Oct 27, 2023  • #2
User Image
Lukasz Przenioslo
28 discussion posts
Hi and thank you for the answer.
Yes, this feature would be really great. The issue with basic separation is that not many traces use them this way. What would be something worth considering, is separating based on the number of characters, as traces headers often have a fixed number of these.

But regex would probably take care of that too, thank you!
Oct 28, 2023  • #3
Subscribe to this discussion topic using RSS
Was this helpful?  Login to Vote(-)  Login to Vote(-)