From 91bea72d2ac08f3885f6ec2971712913fc24456d Mon Sep 17 00:00:00 2001 From: Robert Fekete Date: Mon, 18 Nov 2024 16:52:00 +0100 Subject: [PATCH] [4.8.1] Adds no-piggyback-errors flag --- .../parser-syslog/parser-syslog-options/_index.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md b/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md index dcfc1053..c31e2c56 100644 --- a/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md +++ b/content/chapter-parsers/parser-syslog/parser-syslog-options/_index.md @@ -14,7 +14,12 @@ The `syslog-parser()` has the following options: {{< include-headless "chunk/option-source-flags.md" >}} -For the `syslog-parser()` you can also set the `check-hostname` flag, which is equivalent with the [`check-hostname()` global option]({{< relref "/chapter-global-options/reference-options/_index.md#global-option-check-hostname" >}}), but only applies to this parser. +For the `syslog-parser()` you can also set the following flags: + +- `check-hostname`: Equivalent with the [`check-hostname()` global option]({{< relref "/chapter-global-options/reference-options/_index.md#global-option-check-hostname" >}}), but only applies to this parser. +- `no-piggyback-errors`: Do not attribute the message to {{< product >}} in case of errors. Things already processed or extracted are retained, for example: `${MESSAGE}` retains its value (potentially the raw message), other macros like `${HOST}`, `${PROGRAM}`, or `${PID}` may or may not be extracted. The error is indicated by setting `${MSGFORMAT}` set to "syslog:error". + + Available in {{< product >}} 4.8.1 and later. ## sdata-prefix()