<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><DIV>Hi,</DIV>
<DIV> </DIV>
<DIV>I am getting a weird issues while using the syslog destination driver. I am sending an xml message to syslog (syslog-ng 3.1) and forwarding the message over to another destination. </DIV>
<DIV> </DIV>
<DIV>The relevant entries in my syslog.conf look as following:</DIV>
<DIV> </DIV>
<DIV>filter f_atna { facility(local7); };</DIV>
<DIV> </DIV>
<DIV>destination d_loghost { syslog("19.16.2.9" transport("tcp") port(6514) template("$MESSAGE")); };</DIV>
<DIV> </DIV>
<DIV>log { source(src); filter(f_atna); destination(d_loghost); };</DIV>
<DIV> </DIV>
<DIV>The problem I am running into is that the xml message is not getting processed on the other side because I am getting some weird characters are getting added in the xml message:</DIV>
<DIV> </DIV>
<DIV>
<P><?xml <FONT style="BACKGROUND-COLOR: #ffff40">- - -</FONT> version="1.0" encoding="UTF-8"?><BR></P>
<P> </P>
<P>The above xml tag is constant in my program and therefore I am not inserting it and I don't even see it in /var/log/localmessages</P></DIV>
<DIV> </DIV>
<DIV>Dec 28 11:01:07 10.15.1.1 <?xml version="1.0" encoding="UTF-8"?></DIV>
<DIV> </DIV>
<DIV>but when I do see it in my tcpdump I do see it. </DIV>
<DIV> </DIV>
<DIV>
<DIV>I am not seeing these weird dashes when I use the tcp destination driver but the message is not in the required format so it blows up on the other side. </DIV></DIV>
<DIV> </DIV>
<DIV>Has anyone seen this issue before? Any help will be greatly appreciated. </DIV>
<DIV> </DIV>
<DIV>Thanks,</DIV>
<DIV>Amit</DIV></div><br>
</body></html>