[syslog-ng]Lost of facility/level
Balazs Scheidler
bazsi@balabit.hu
Tue, 16 Apr 2002 13:47:39 +0200
On Tue, Apr 16, 2002 at 12:50:31PM +0200, Jerome Peducasse wrote:
> It seems, it occurs errors with long messages.
> With this code:
> KELOG_RELEASE(( LOG_ERR, \
> "not enougth space to make result ouput! \n varlen=%d len=%d max_len=%d \n result is '%s'\n" WHERE, \
> varlen, len, max_len, result, \
> HERE ));
> messages come in user.notice instead of local0.err:
>
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=19 varlen=19 len=2048 max_len=2048
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] result result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW série 5 145 </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80 </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13 145 </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155 </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175 </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 185 </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'!
> > !
> </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> </SP><SP TYPE=\'W\'>14<131>Apr 16 11:18:43 w3search[2495]: not enougth space to make result ouput!
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=6 varlen=6 len=2048 max_len=2048
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642
>
I see, syslog-ng supports maximum 1024 long messages. You can raise this
limit, by increasing a constant in syslog-ng.h and recompile.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1