I've tried, but was unable to rewrite the following snippet using a parser type:
parser p_ts_acs {
channel {
parser {
csv_parser(
columns(
"tmp.date"
"tmp.time"
"MESSAGE"
)
delimiters(" ")
flags(
strip-whitespace
greedy
)
);
};
rewrite(r_st_acs);
};
};
Is this even possible?