<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Book Antiqua";
panose-1:2 4 6 2 5 3 5 3 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
h1
{margin-top:12.0pt;
margin-right:0in;
margin-bottom:3.0pt;
margin-left:0in;
page-break-after:avoid;
font-size:14.0pt;
font-family:"Book Antiqua";}
h2
{margin-top:12.0pt;
margin-right:0in;
margin-bottom:3.0pt;
margin-left:0in;
page-break-after:avoid;
font-size:12.0pt;
font-family:"Book Antiqua";
font-style:italic;}
h3
{margin-top:12.0pt;
margin-right:0in;
margin-bottom:3.0pt;
margin-left:0in;
page-break-after:avoid;
font-size:12.0pt;
font-family:"Book Antiqua";
font-weight:normal;}
p.MsoHeader, li.MsoHeader, div.MsoHeader
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
p.MsoFooter, li.MsoFooter, div.MsoFooter
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:#606420;
text-decoration:underline;}
p.ABLOCKPARA, li.ABLOCKPARA, div.ABLOCKPARA
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
p.ABULLET, li.ABULLET, div.ABULLET
{margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:16.55pt;
margin-bottom:.0001pt;
text-indent:-16.55pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
p.AINDENTEDBULLET, li.AINDENTEDBULLET, div.AINDENTEDBULLET
{margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:33.1pt;
margin-bottom:.0001pt;
text-indent:-16.55pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
p.AINDENTEDPARA, li.AINDENTEDPARA, div.AINDENTEDPARA
{margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:16.55pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Book Antiqua";}
span.EmailStyle23
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in .75in 1.0in .75in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink="#606420">
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hello all,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I am having issues with syslog-ng adding prefixes to my
messages. I currently have a syslog-ng agent sending messages from a log
source to a syslog-ng central server. I am then sending the messages from
the central server to a 3<sup>rd</sup> party event management program. Is
there a way to forward an unchanged syslog-ng message from the relay server?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>For example:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Message arriving from source: <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Apr 16 09:31:07 psrdev47 10.56.9.12 - -
[16/Apr/2009:09:31:02 -0700] "GET / HTTP/1.1" 302 427 "-"
"-"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Message being forwarded from server: <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Apr 16 09:31:07 10.56.2.77 125 <0>1
2009-04-16T09:31:02-07:00 psrdev47 - - - - 10.56.9.12 - - [16/Apr/2009:09:31:02
-0700] "GET / HTTP/1.1" 302 427 "-" "-"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>How can I configure the syslog-ng server to relay this
unchanged message to our destination?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'>Apr 16 09:31:07 psrdev47 10.56.9.12 - -
[16/Apr/2009:09:31:02 -0700] "GET / HTTP/1.1" 302 427 "-"
"-"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thanks for your help!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Adam<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Book Antiqua"><o:p> </o:p></font></p>
</div>
<div id="##disclaimer##"><p></p><p style="FONT-SIZE: x-small; FONT-FAMILY: Arial, Sans-Serif">This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.</p></div></body>
</html>