<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
<br>> Date: Mon, 8 Sep 2008 07:09:37 -0700<br>> From: infosec@gmail.com<br>> To: syslog-ng@lists.balabit.hu<br>> Subject: Re: [syslog-ng] Anyone Using Mailgraph (an RRD based Tool) for Postfix Mail Logs???<br>> <br>> On Mon, Sep 8, 2008 at 5:51 AM, <wiskbroom@hotmail.com> wrote:<br>> ><br>> ><br>> > write(2, "WARNING: line not in syslog form"..., 172) = 172<br>> ><br>> > My syslog-ng.conf has the following relevant data for this particular source:<br>> ><br>> > options<br>> > {<br>> > ...<br>> > long_hostnames(on);<br>> > ..<br>> > };<br>> ><br>> <br>> Set long_hostnames to off, and then when you no longer have hostnames like<br>> mailserver.mailserver.net/mailserver.example.net you'll probably be ok.<br><br>Cat;<br><br>This worked indeed! Thank you. Is there any other way to achieve this? While this fixes this problem, it breaks other functionality I have in place, i.e. my logrotate scripts and some other SEC rules.<br><br>Thanks!<br><br>.vp<br></body>
</html>