I am using a reg-exp to set the host name from the file path
e.g. \servername\logs\application\ag_clientname_log
monitor \servername\logs\application\ag_*
host_regex = (ag_[^_]+)
this gives me "ag_clientname" but I want "clientname_ag_logs" to match what we had previously been collecting.
There is no way to do this that I know. I would create a link to each file in a different directory and give each the link the correct name and point the monitor
to the other directory. This consumes NO extra disk space (only 1 inode per file).
Hi
You could use also eval
| eval host=substr(host,4,15)+"_ag_logs"
Bye
Giuseppe