template

Selects the rsyslog template used to render each message before it is added to the Azure ingestion batch.

This parameter applies to omazuredce: Azure Monitor Logs Ingestion Output Module.

Name:: template
Scope:: action
Type:: word
Default:: action=StdJSONFmt
Required?:: no
Introduced:: Not specified

Description

The selected template must render exactly one valid JSON object per message. omazuredce parses the rendered text and merges it into the batch payload. If this parameter is omitted, the module uses the built-in StdJSONFmt template, which already renders one JSON object per message.

Action usage

template(name="tplAzureDce" type="list" option.jsonf="on") {
   property(outname="TimeGenerated" name="timereported" dateFormat="rfc3339" format="jsonf")
   property(outname="Host" name="hostname" format="jsonf")
   property(outname="Message" name="msg" format="jsonf")
}

action(type="omazuredce" template="tplAzureDce" ...)

See also

See also omazuredce: Azure Monitor Logs Ingestion Output Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.