[syslog-ng]Lost of facility/level

Balazs Scheidler bazsi@balabit.hu
Tue, 16 Apr 2002 13:47:39 +0200


On Tue, Apr 16, 2002 at 12:50:31PM +0200, Jerome Peducasse wrote:
> It seems, it occurs errors with long messages.
> With this code:
> KELOG_RELEASE(( LOG_ERR, \
>                         "not enougth space to make result ouput! \n   varlen=%d len=%d max_len=%d \n   result is '%s'\n" WHERE,  \
>                         varlen, len, max_len, result, \
>                         HERE ));
> messages come in user.notice instead of local0.err:
> 
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=19 varlen=19 len=2048 max_len=2048 
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] result result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW série 5 145  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13  145  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 185  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'!
>  > !
>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>14<131>Apr 16 11:18:43 w3search[2495]: not enougth space to make result ouput! 
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=6 varlen=6 len=2048 max_len=2048 
> Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice]  <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 
> 

I see, syslog-ng supports maximum 1024 long messages. You can raise this
limit, by increasing a constant in syslog-ng.h and recompile.


-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1