I use time_zone instead timezone,configuration like this <br>===========================================================<br>template apache_template { template("$DAY-$HOUR $S_DAY-$S_HOUR $R_DAY-$R_HOUR $MSGONLY\n"); template_escape(no); };<br>
destination us_int_apache { file("/disk2/apache_logs/$YEAR-$MONTH-$DAY/$HOST.apache.log" timezone("PST8PDT") template(apache_template)); };<br>============================================================<br>
service can start,but the problem still exists.<br>the file is stored in the /disk2/apache_logs/2009-02-12<br>generated log is:<br>11-17 11-17 11-17 222.69.201.23 - - - [11/Feb/2009:17:37:03 -0800] "GET /atmgateway.client.html ...................<br>
two date string still difference. I use syslog-ng 3.0.1 OSE version,is this OSE version problem?<br><br><div class="gmail_quote">2009/2/11 Balazs Scheidler <span dir="ltr"><<a href="mailto:bazsi@balabit.hu">bazsi@balabit.hu</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">On Wed, 2009-02-11 at 09:43 +0800, Charles Chan wrote:<br>
> I use follow configuration still not work,display "syntax error".<br>
> destination us_int_apache<br>
> { file("/disk2/apache_logs/$YEAR-$MONTH-$DAY/$HOST.apache.log"<br>
> timezone("PST8PDT") template(apache_template)); };<br>
<br>
</div>sorry, the keyword is called 'time_zone'. notice the underscore.<br>
<font color="#888888"><br>
--<br>
</font><div><div></div><div class="Wj3C7c">Bazsi<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</div></div></blockquote></div><br>