[syslog-ng] Syslog-NG Windows Agent collecting Logs

Zoltán Pallagi pzolee at balabit.hu
Mon Feb 7 12:45:16 CET 2011


Hi,

Unfortunatelly, agent cannot do that. It doesn't parse the message parts 
coming from file source, just will use the whole line as a full message.
If you need these information, you should use patterndb or filters to 
parse in syslog-ng.

On 2011-02-07 12:07, Heinze, René wrote:
> Hi,
>
>
>
> I´m having the following problem with the Syslog-Agent for Windows:
>
> Our application writes log messages in a log file according the schema: “date + priority + application name + message text”
>
> When the Syslog-ng agent collects those log messages from the file it does not extract date, priority, etc. from the log message but assigns its own values (according its configuration) and uses the entire line as message text.
>
> What we want instead is that the Syslog-ng agent extracts that information from the line and uses only the actual message text as message text.
>
> Is this possible?
>
>
>
> Thanks.
>
>
>
> René
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>



More information about the syslog-ng mailing list