# SysSock.ParseTrusted

Turns trusted properties into JSON fields when annotation is enabled.

This parameter applies to imuxsock: Unix Socket Input Module.

Name:

  SysSock.ParseTrusted

Scope:

  module

Type:

  boolean

Default:

  module=off

Required?:

  no

Introduced:

  6.5.0

## Description

If `SysSock.Annotation` is turned on, create JSON/lumberjack properties out of the trusted properties (which can be accessed via `advanced` JSON Variables, e.g. `$!pid`) instead of adding them to the message.

Added in version 6.5.0: As `$SystemLogParseTrusted`.

Changed in version 7.2.7: Support for the advanced format was added.

## Module usage

    module(load="imuxsock" sysSock.parseTrusted="on")

### Legacy names (for reference)

Historic names/directives for compatibility. Do not use in new configs. .. _imuxsock.parameter.legacy.systemlogparsetrusted:

- $SystemLogParseTrusted — maps to SysSock.ParseTrusted (status: legacy)

## See also

See also imuxsock: Unix Socket Input Module.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.