diff --git a/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md b/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md index dcfc1053..c31e2c56 100644 --- a/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md +++ b/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md @@ -14,7 +14,12 @@ The `syslog-parser()` has the following options: {{< include-headless "chunk/option-source-flags.md" >}} -For the `syslog-parser()` you can also set the `check-hostname` flag, which is equivalent with the [`check-hostname()` global option]({{< relref "/chapter-global-options/reference-options/_index.md#global-option-check-hostname" >}}), but only applies to this parser. +For the `syslog-parser()` you can also set the following flags: + +- `check-hostname`: Equivalent with the [`check-hostname()` global option]({{< relref "/chapter-global-options/reference-options/_index.md#global-option-check-hostname" >}}), but only applies to this parser. +- `no-piggyback-errors`: Do not attribute the message to {{< product >}} in case of errors. Things already processed or extracted are retained, for example: `${MESSAGE}` retains its value (potentially the raw message), other macros like `${HOST}`, `${PROGRAM}`, or `${PID}` may or may not be extracted. The error is indicated by setting `${MSGFORMAT}` set to "syslog:error". + + Available in {{< product >}} 4.8.1 and later. ## sdata-prefix()