Update 5424 templates to include RAWMSG

* Update 5424 output templates to include RAWMSG. Too confusing for most users without them, and there are some small parts of the message that are excluded (such as colons) that are needed to reassemble the raw message with the constituent macros.
CSVD · May 7, 2020 · dc15a9f · dc15a9f
1 parent 9085ed4
commit dc15a9f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/package/etc/conf.d/conflib/_common/templates.conf b/package/etc/conf.d/conflib/_common/templates.conf
@@ -80,6 +80,7 @@ template t_JSON_5424 {
     template('$(format-json --scope rfc5424
                 --pair PRI="<$PRI>"
                 --key ISODATE
+                --key RAWMSG
                 --exclude DATE
                 --exclude FACILITY
                 --exclude PRIORITY
@@ -95,6 +96,7 @@ template t_JSON_5424_SDATA {
     template('$(format-json --scope rfc5424
                 --pair PRI="<$PRI>"
                 --key ISODATE
+                --key RAWMSG
                 --exclude DATE
                 --exclude HOST
                 --exclude FACILITY