Message Modification Modules¶
Message modification modules are used to change the content of messages being processed. They can be implemented using either the output module or the parser module interface. From the rsyslog core’s point of view, they actually are output or parser modules, it is their implementation that makes them special.
- mmaitag: AI-based classification
- mmanon: IP Address Anonymization Module
- mmaudit: Linux Audit Log Parser
- mmcount: Message counting module
- mmdarwin: Darwin AI CyberSecurity Framework connector
- mmdblookup: MaxMind/GeoIP DB lookup
- mmexternal: Support module for external message modification plugins
- mmfields: Fields Extraction Module
- mmjsonparse: JSON Structured Content Extraction Module
- mmjsonrewrite: JSON Dotted Key Rewriter
- mmjsontransform: JSON Dotted Key Transformer
- mmkubernetes: Kubernetes Metadata Module
- mmleefparse: LEEF Structured Content Extraction Module
- mmnormalize: Log Message Normalization Module
- mmpstrucdata: RFC5424 structured data parsing module
- mmrfc5424addhmac: RFC5424 HMAC injection module
- mmrm1stspace: First Space Modification Module
- mmsequence: Number generator and counter module
- mmsnareparse: NXLog Snare Windows Security parser
- mmsnmptrapd: snmptrapd message modification module
- mmtaghostname: Message tag/hostname modification module
- mmutf8fix: Fix invalid UTF-8 Sequences
Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project
Contributing: Source & docs: rsyslog source project
© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.