<div><font face="arial, helvetica, sans-serif">Hi,</font></div><div><font face="arial, helvetica, sans-serif"><br></font></div><div><font face="arial, helvetica, sans-serif">In documentation 3.1 (page 70) ;)</font></div><div>
<font face="arial, helvetica, sans-serif"><br></font></div><div><p class="MsoNormal" style><font face="arial, helvetica, sans-serif"><span lang="EN-GB">By default, syslog-ng sends messages using the following template: </span><i><span lang="EN-GB" style="font-size:10pt">$ISODATE $HOST $MSGHDR$MSG\n</span></i><span lang="EN-GB">. </span></font></p>
<p class="MsoNormal" style><font face="arial, helvetica, sans-serif"><span lang="EN-GB">(The<u> </u></span><i><span lang="EN-GB" style="font-size:10pt">$MSGHDR$MSG </span></i><span lang="EN-GB">part is written together because the </span><i><span lang="EN-GB" style="font-size:10pt">$MSGHDR </span></i><span lang="EN-GB">macro includes a trailing whitespace.)</span></font></p>
<p class="MsoNormal" style><span lang="EN-GB"><font face="arial, helvetica, sans-serif"><br></font></span></p><p class="MsoNormal" style><span lang="EN-GB"><font face="arial, helvetica, sans-serif">--</font></span></p><p class="MsoNormal" style>
<span lang="EN-GB"><font face="arial, helvetica, sans-serif">JG</font></span></p></div><br><div class="gmail_quote">Le 13 avril 2012 09:04, Fu Ecy <span dir="ltr"><<a href="mailto:fuzhijie1985@gmail.com" target="_blank">fuzhijie1985@gmail.com</a>></span> a écrit :<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Dear guys:<div><br><div> I use syslog-ng to gather the error log of my system, but now I have a problem. The original log message is like this.</div></div><div><br></div><div><i>[<span style="background-color:rgb(255,0,0)">2012-04-10 </span></i><i style="background-color:rgb(255,0,0)">18:51:30</i><i>] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error</i></div>
<div><br></div><div> I set the template like this.</div><div><br></div><div><i>file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY" create_dirs(yes) owner(admin) group(admin) perm(0755) template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );</i></div>
<div><br></div><div> Then I get the log like this.</div><div><br></div><div><i>2012-04-13 14:41:36 s061090.cm5 <span style="background-color:rgb(255,0,0)">18:51:30]</span> [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error</i></div>
<div><br></div><div> The date of original log message has been truncated. If I don't use template, it will be ok. So I wonder what is the default template.</div><div><br></div><div> Thank you very much :)</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br>