<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">When it see's
a new line thats just "bar" it tries to parse it. It'll end up parsing
it with 'bar' being the hostname, and will give it a default facility
and default priority with a blank message text. Im not sure what the
default facility and priority end up being, but unless you have a log
rule which matches them and does something with them, they will just
get dropped.<br>
<br>
-Patrick<br>
</font></font><br>
Sent: Wed Dec 01 2010 17:42:46 GMT-0700 (Mountain Standard Time)<br>
From: Ian Lesperance <a class="moz-txt-link-rfc2396E" href="mailto:ianl@ezpublishing.com"><ianl@ezpublishing.com></a><br>
To: Syslog-ng users' and developers' mailing list
<a class="moz-txt-link-rfc2396E" href="mailto:syslog-ng@lists.balabit.hu"><syslog-ng@lists.balabit.hu></a> <br>
Subject: Re: [syslog-ng] Extra Lines Truncated
<blockquote
cite="mid:AANLkTikbsmUrwx+0Noxf9C58zt6yMRf+U+nSJA3hU-MW@mail.gmail.com"
type="cite">It happens even with "foo\nbar". "foo" is written but
"bar" is nowhere to be found.
<div><br>
</div>
<div>Not sure if it's relevant, but carriage returns pass through
unaltered.<br>
<div><br>
Ian<br>
<br>
<br>
<div class="gmail_quote">On Wed, Dec 1, 2010 at 2:15 PM, Bill
Anderson <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:Bill.Anderson@bodybuilding.com" target="_blank">Bill.Anderson@bodybuilding.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">If
your lines are long, you might be running up against the line length
limit. You might do something like the following in options:<br>
<br>
# maximum length of message in bytes<br>
# this is only limited by the program listening on the /dev/log Unix<br>
# socket, glibc can handle arbitrary length log messages, but -- for<br>
# example -- syslogd accepts only 1024 bytes<br>
# (default is 2048)<br>
log_msg_size(8192);<br>
<br>
And see if that helps.<br>
<br>
<br>
<br>
________________________________________<br>
From: <a moz-do-not-send="true"
href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>
[<a moz-do-not-send="true"
href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>]
On Behalf Of Ian Lesperance [<a moz-do-not-send="true"
href="mailto:ianl@ezpublishing.com" target="_blank">ianl@ezpublishing.com</a>]<br>
Sent: Wednesday, December 01, 2010 2:28 PM<br>
To: Syslog-ng users' and developers' mailing list<br>
Subject: Re: [syslog-ng] Extra Lines Truncated<br>
<div><br>
That makes sense, and it'd be great if that's what it did, but it
actually seems to just drop the rest of the message entirely. The
extra lines don't show up anywhere in the log file, with or without
metadata.<br>
<br>
Based on the search results I found on Google, I thought syslog-ng
replaced newlines with spaces just like syslog. So that's no longer
the case? I'd ask what version it was changed in, but I'm not seeing
either behavior, so I doubt that's the issue.<br>
<br>
Ian<br>
<br>
</div>
<div>
<div>______________________________________________________________________________<br>
Member info: <a moz-do-not-send="true"
href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a moz-do-not-send="true"
href="http://www.balabit.com/support/documentation/?product=syslog-ng"
target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a moz-do-not-send="true"
href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</div>
</div>
</blockquote>
</div>
<br>
</div>
</div>
<pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>