diff --git a/doc/_admin-guide/110_Template_and_rewrite/000_Customize_message_format/004_Macros_of_syslog-ng.md b/doc/_admin-guide/110_Template_and_rewrite/000_Customize_message_format/004_Macros_of_syslog-ng.md index 73684228..6140af1d 100644 --- a/doc/_admin-guide/110_Template_and_rewrite/000_Customize_message_format/004_Macros_of_syslog-ng.md +++ b/doc/_admin-guide/110_Template_and_rewrite/000_Customize_message_format/004_Macros_of_syslog-ng.md @@ -435,6 +435,49 @@ database column. An alias of the ${TZOFFSET} macro. +## ${TRANSPORT} + +This macro is available in syslog-ng OSE 4.5 and later versions. The syslog-ng OSE application automatically populates this name-value pair with the transport-mechanism used to retrieve the message. The value depends on the source driver that received the message. The implemented values are the following: + +* BSD syslog drivers `tcp()`, `udp()` & `network()` + * rfc3164+tls + * rfc3164+tcp + * rfc3164+udp + * rfc3164+proxied-tcp + * rfc3164+proxied-tls + * rfc3164+proxied-tls-passthrough + * rfc3164+ \ + +* UNIX domain drivers `unix-dgram()`, `unix-stream()` + * `unix-stream` + * `unix-dgram` + +* rfc5424 style syslog `syslog()`: + * rfc5426+udp + * rfc6587+tcp + * rfc6587+proxied-tcp + * rfc5425+tls + * rfc5424+proxied-tls + * rfc5424+proxied-tls-passthrough + * rfc5424+\: syslog over a logproto plugin + + +* Other drivers: + * otlp: `otel()` driver + * mqtt: `mqtt()` driver + * hypr-api: `hypr-audit-trail()` driver + +* Locally created logs (available in 4.7 and later versions): + * `local+unix-stream` + * `local+unix-dgram` + * `local+file` + * `local+pipe` + * `local+program` + * `local+devkmsg` + * `local+journal` + * `local+afstreams` + * `local+openbsd` + ## ${TZOFFSET}, ${C_TZOFFSET}, ${R_TZOFFSET}, ${S_TZOFFSET} The time-zone as hour offset from GMT, for example: