Skip to content

Commit 3740b07

Browse files
committed
Added TRANSPORT macro to the list of available macros.
Signed-off-by: Zsolt Gyulai (zgyulai) <zsolt.gyulai@quest.com>
1 parent 7bd6c2b commit 3740b07

File tree

1 file changed

+37
-0
lines changed

1 file changed

+37
-0
lines changed

doc/_admin-guide/110_Template_and_rewrite/000_Customize_message_format/004_Macros_of_syslog-ng.md

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -430,6 +430,43 @@ database column.
430430

431431
An alias of the ${TZOFFSET} macro.
432432

433+
## ${TRANSPORT}
434+
435+
This macro is available in syslog-ng OSE 4.5 and later versions. The syslog-ng OSE application automatically populates this name-value pair with the transport-mechanism used to retrieve the message. The value depends on the source driver that received the message. The implemented values are the following:
436+
437+
* BSD syslog drivers `tcp()`, `udp()` & `network()`
438+
* `rfc3164+tls`
439+
* `rfc3164+tcp`
440+
* `rfc3164+udp`
441+
* `rfc3164+proxied-tls`
442+
* `rfc3164+<custom logproto like altp>`
443+
444+
* UNIX domain drivers `unix-dgram()`, `unix-stream()`
445+
* `unix-stream`
446+
* `unix-dgram`
447+
448+
* RFC5424-style syslog `syslog()`:
449+
* `rfc5426`: syslog over udp
450+
* `rfc5425`: syslog over tls
451+
* `rfc6587`: syslog over tcp
452+
* `rfc5424+<custom logproto like altp>`: syslog over a logproto plugin
453+
454+
* Other drivers:
455+
* otlp: `otel()` driver
456+
* mqtt: `mqtt()` driver
457+
* hypr-api: `hypr-audit-source()` driver
458+
459+
* Locally created logs (available in 4.7 and later versions):
460+
* `local+unix-stream`
461+
* `local+unix-dgram`
462+
* `local+file`
463+
* `local+pipe`
464+
* `local+program`
465+
* `local+devkmsg`
466+
* `local+journal`
467+
* `local+afstreams`
468+
* `local+openbsd`
469+
433470
## ${TZOFFSET}, ${C_TZOFFSET}, ${R_TZOFFSET}, ${S_TZOFFSET}
434471

435472
The time-zone as hour offset from GMT, for example:

0 commit comments

Comments
 (0)