<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Bazsi;<br><br>I've just compiled eventlog and syslog-ng latest and am unable to find any mention in either sample syslog-ng.conf files, nor in any documentation.<br><br>How would I go about setting up "LinkSys" style timestamps for a particular host only, leaving others alone, say based on it's IP address?<br><br>Many thanks,<br><br>.vp<br><br><blockquote><hr>From: wiskbroom@hotmail.com<br>To: syslog-ng@lists.balabit.hu<br>Date: Thu, 17 Jan 2008 07:43:41 -0500<br>Subject: Re: [syslog-ng] Date and Host in Syslog Format Need Swapping<br><br>
<meta http-equiv="Content-Type" content="text/html; charset=unicode">
<meta name="Generator" content="Microsoft SafeHTML">
<style>
.ExternalClass .EC_hmmessage P
{padding:0px;}
.ExternalClass EC_body.hmmessage
{font-size:10pt;font-family:Tahoma;}
</style>
Baz;<br><br>Thank you, I hadn't a good reason, until now, to upgrade. I will try that and see.<br><br>All the best,<br><br>.vp<br><br>> From: bazsi@balabit.hu<br>> To: syslog-ng@lists.balabit.hu<br>> Date: Thu, 17 Jan 2008 10:23:34 +0100<br>> Subject: Re: [syslog-ng] Date and Host in Syslog Format Need Swapping<br>> <br>> <br>> On Wed, 2008-01-16 at 18:35 -0800, infosec@gmail.com wrote:<br>> <br>> > From: <wiskbroom@hotmail.com><br>> > Subj: [syslog-ng] Date and Host in Syslog Format Need Swapping<br>> > Date: Wed Jan 16, 2008 12:46 pm<br>> > Size: 440 bytes<br>> > To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>> > <br>> > <br>> > Hello:<br>> > <br>> > I have an appliance that I've configured to send logs to syslog, but it is sending to a file named 2008.log instead of $FULLHOST.log<br>> > <br>> > None of the other logs that I am getting contain the year, but for some reason, this one is. Below is a sample of the log itself.<br>> > <br>> > Jan 16 15:31:06 2008 [192.168.100.1]<br>> > <br>> > Is it possible to ignore the YEAR and make output go to $FULLHOST.log ?<br>> > <br>> > Thank you,<br>> <br>> at least syslog-ng 2.0.7 can process timestamps like this. It was<br>> integrated as "LinkSys" style timestamps.<br>> <br>> -- <br>> Bazsi<br><br>
</blockquote></body>
</html>