<br><font size=2 face="sans-serif">Hi all</font>
<br>
<br>
<br>
<br><font size=2 face="sans-serif">I have a weird problem with syslog-ng.
I am setting up a syslog-ng client on an Apache server which forward both
access and error log to a central syslog-ng server. </font>
<br>
<br><font size=2 face="sans-serif">The access log on the source has entries
like this:</font>
<br><font size=2 face="sans-serif">10.3.154.20 - - [23/Apr/2010:13:55:25
+0200] "GET /images/userLo...</font>
<br><font size=2 face="sans-serif">and this becomes like this on the syslog
server: <br>
servername 10.3.154.20: - - [23/Apr/2010:13:55:25 +0200] "GET /images/use</font>
<br>
<br><font size=2 face="sans-serif">All ok with this one, but with the error
log I get this on the webserver:</font>
<br><font size=2 face="sans-serif">[Fri Apr 23 13:55:25 2010] [error] [client
10.3.154.20] File doe...</font>
<br><font size=2 face="sans-serif">but this on the syslog server:</font>
<br><font size=2 face="sans-serif">servername Apr 23 13:55:25 2010] [error]
[client 10.3.154.20] File do...</font>
<br>
<br><font size=2 face="sans-serif">Where is the [ character at the beginning
of the timestamp gone?????</font>
<br>
<br><font size=2 face="sans-serif">Both logs use the same type configuration;
I have double checked everything, but I have no clue why syslog-ng(?) does
this... </font>
<br>
<br><font size=2 face="sans-serif">In wireshark the receiving syslog server
is receiving it like this, so it is send like this by syslog-ng on the
source server. </font>
<br>
<br><font size=2 face="sans-serif">Any idea?</font>
<br>
<p><font size=2 face="sans-serif"> </font>
<p><font size=2 face="sans-serif">Met vriendelijke groeten / Cordialement
/ Freundliche Grüße / Best Regards<br>
</font><font size=3 face="sans-serif"><br>
</font><font size=2 face="sans-serif"><br>
Filip Nollet</font><font size=1 face="sans-serif"><br>
Bio Information System Administrator</font><font size=3 color=#0099cc face="sans-serif"><b><br>
_______________________</b></font><font size=2 face="sans-serif"><br>
<br>
</font><img src=cid:_1_04D6513404D64D200042C4EFC125770E><font size=2 face="sans-serif"><br>
</font><font size=1 face="sans-serif"><br>
Bayer BioScience N.V.<br>
Bio Information Management - A&S<br>
Technologiepark 38<br>
9052 Zwijnaarde<br>
Phone: +32-9.243.04.28 <br>
Fax: +32-9.224.06.94<br>
E-mail: </font><a href=mailto:filip.nollet@bayercropscience.com><font size=1 color=#0099cc face="sans-serif"><u>filip.nollet@bayercropscience.com</u></font></a><font size=3 face="sans-serif"><br>
<br>
</font>
<P><FONT face=Arial size=1>
<HR>
</FONT></P>
<P></P>
<P><FONT face=Arial size=1><EM>The information contained in this e-mail is for
the exclusive use of the intended recipient(s) and may be confidential,
proprietary, and/or legally privileged. Inadvertent disclosure of this
message does not constitute a waiver of any privilege. If you receive this
message in error, please do not directly or indirectly use, print, copy,
forward, or disclose any part of this message. Please also delete this
e-mail and all copies and notify the sender. Thank you. </EM></FONT></P>
<P><FONT face=Arial size=1><EM>For alternate languages please go to
</EM></FONT><A href="http://bayerdisclaimer.bayerweb.com"><FONT face=Arial
color=#0000ff size=1><EM>http://bayerdisclaimer.bayerweb.com</EM></FONT></A></P>
<P><FONT face=Arial size=1>
<HR>
</FONT>
<P></P>