diff --git a/misc/rsyslog/misc.md b/misc/rsyslog/misc.md
new file mode 100644
index 0000000..253dd6c
--- /dev/null
+++ b/misc/rsyslog/misc.md
@@ -0,0 +1,4 @@
+## Extract filename from metadata (need addMetadata directive in input)
+```
+set $!FileName = re_extract($!metadata!filename, "([^/]*\$)", 0, 0, "failedToFetchFileName");
+```