Merge pull request #421 from splunk/destination/refine_rawmsg

Refine rawmsg destination
CSVD · May 4, 2020 · aaa5d08 · aaa5d08
2 parents 3520f2c + 295c7ab
commit aaa5d08
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/package/etc/conf.d/destinations/rawmsg_file.conf b/package/etc/conf.d/destinations/rawmsg_file.conf
@@ -1,5 +1,11 @@
 destination d_rawmsg {
-    file("/opt/syslog-ng/var/archive/rawmsg/${.splunk.sourcetype}/${HOST}/$YEAR-$MONTH-$DAY-message.log"
-         template("${RAWMSG}\n")
-     );
-};
+    channel {
+        if ("${RAWMSG}" ne "") {
+            destination {
+                file("/opt/syslog-ng/var/archive/rawmsg/${.splunk.sourcetype}/${HOST}/$YEAR-$MONTH-$DAY-message.log"
+                template("${RAWMSG}\n")
+                );
+            };
+        };
+    };
+};