Skip to content
Merged
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions config/_default/config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -172,9 +172,9 @@ description = "Documentation for AxoSyslog, the scalable security data processor
[params.product]
name = "AxoSyslog"
abbrev = "AxoSyslog"
version = "4.17"
techversion = "4.17.0"
configversion = "4.17"
version = "4.18"
techversion = "4.18.0"
configversion = "4.18"
syslog-ng = "syslog-ng"
selinux = "SELinux"
apparmor = "AppArmor"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -191,21 +191,21 @@ For details on how this option influences HTTP batch mode, see [http: Posting me

| | |
| -------- | ----------- |
| Type: | string list |
| Type: | string or template list |
| Default: | |

*Description:* Custom HTTP headers to include in the request, for example, `headers("HEADER1: header1", "HEADER2: header2")`. If not set, only the default headers are included, but no custom headers.

The following headers are included by default:

- X-Syslog-Host: `<host>`
- X-Syslog-Host: `<host>`
- X-Syslog-Program: `<program>`
- X-Syslog-Facility: `<facility>`
- X-Syslog-Level: `<loglevel/priority>`

- X-Syslog-Program: `<program>`

- X-Syslog-Facility: `<facility>`

- X-Syslog-Level: `<loglevel/priority>`
Starting with {{< product >}} 4.18, you can use templates in the headers. Note that when using batching in the destination adn templates in `headers()`, the value of the template is calculated from the first message of the batch. Make sure to set the [`worker-partition-key()`](#worker-partition-key) option properly to group similar messages.

If you want to use literal dollar signs (`$`) in `headers()`, escape them like `$$`.

{{< include-headless "chunk/option-destination-hook.md" >}}

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -69,6 +69,24 @@ Using the `greedy=true` flag will assign the remainder of the message to the las
my-parsed-values = parse_csv(${MESSAGE}, columns=["COLUMN1", "COLUMN2", "COLUMN3"], delimiters=[","], greedy=true);
```

## quote-pairs() {#quote-pairs}

| | |
| --------- | ------------------------------- |
| Synopsis: | `quote-pairs=["<qoute-pair1>", "<qoute-pair2>"]` |

*Description:* List of quote pairs that are ignored and removed from the beginning and end of the strings. Note that the beginning and ending quote character does not have to be identical, for example, `[}` can also be a quote-pair.

In the following example, square brackets (`[]`) and single-quotes (`'`) are ignored:

```shell
filterx {
str = "value1,[value2],'value3'";
${MESSAGE} = parse_csv(str, quote_pairs=["[]", "'"]);
# The value of ${MESSAGE} will be "value1,value2,value3"
};
```

## strip_whitespace {#strip-whitespace}

| | |
Expand Down