Arbitrary key/value pairs

[RamblingCookieMonster]

Hi!

It might be helpful to offer the option to define arbitrary key/value pairs for each block.

For example, you might have this definition:

nxlog::config::input { 'eventlog_json':
  input_execs  => [
    'delete($Keywords)',
    '$raw_event = to_json()',
  ],
  input_module => 'im_msvistalog',
  arbitrary    => {
    'Query' => "<QueryList> \
        <Query Id='0'> \
          <Select Path='Security'>*</Select> \
        </Query> \
      </QueryList>",
  },
}

Which would translate to something along the lines of:

<Input eventlog_json>
    Module  im_msvistalog
    Query   <QueryList> \
              <Query Id="0"> \
                <Select Path="Security">*</Select> \
              </Query> \
            </QueryList>
    Exec    'delete($Keywords)'; '$raw_event = to_json()';
</Input>

With the idea that you wouldn't need to map out every possible key that folks might want to specify in the nxlog conf., you could leave corner cases to some arbitrary hash table that you parse.

Cheers!

[genebean]

I'll certainly look into this, I think its a good idea.