<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">Set the
no-parse flag on the file source driver and then use filter and/or
rewrite statements to parse them manually.</font></font><br>
<br>
Sent: Mon Nov 22 2010 13:36:38 GMT-0700 (Mountain Standard Time)<br>
From: <a class="moz-txt-link-abbreviated" href="mailto:maillists0@gmail.com">maillists0@gmail.com</a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a> <br>
Subject: [syslog-ng] non syslog files
<blockquote
cite="mid:AANLkTim90K_+2r0b1-r99f8yPefVkfv=TOw-CZDQPh4g@mail.gmail.com"
type="cite">
<pre wrap="">I have some homegrown application logs that are not in syslog format.
I want to have syslog-ng tail those files and forward them to a syslog
server (well, really a Splunk server.) In this case, does syslog-ng
care what format the file is in? If so, is there a way around it?
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>