<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="generator" content="Osso Notes">
<title></title></head>
<body>
<p>
<br>This may not be the functionality you are looking for. Multi-line messages are possible using udp or rfc5425 style framing (syslog driver) only.
<br>
<br>----- Original message -----
<br>> Thank you, Anton! Upgrade is not a problem for me.
<br>>
<br>> On 09/28/2012 05:27 PM, Anton Koldaev wrote:
<br>> > Not sure if it's supported in syslog-ng 3.0, a good reason to upgrade
<br>> > BTW.
<br>> >
<br>> > On Fri, Sep 28, 2012 at 5:25 PM, Anton Koldaev <<a href="mailto:koldaevav@gmail.com">koldaevav@gmail.com</a>
<br>> > <<a href="mailto:koldaevav@gmail.com">mailto:koldaevav@gmail.com</a>>> wrote:
<br>> >
<br>> > /> no-multi-line/: The /|no-multi-line|/ flag disables
<br>> > line-breaking in the messages; the entire message is converted to
<br>> > a single line.
<br>> >
<br>> > see
<br>> > <a href="http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guides/syslog-ng-ose-v3.3-guide-admin-en.html/index.html-single.html">http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guides/syslog-ng-ose-v3.3-guide-admin-en.html/index.html-single.html</a>
<br>> > (search for 'multi-line')
<br>> >
<br>> > On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <<a href="mailto:algernon@balabit.hu">algernon@balabit.hu</a>
<br>> > <<a href="mailto:algernon@balabit.hu">mailto:algernon@balabit.hu</a>>> wrote:
<br>> >
<br>> > "Sergey V. Lobanov" <<a href="mailto:sergey@lobanov.in">sergey@lobanov.in</a>
<br>> > <<a href="mailto:sergey@lobanov.in">mailto:sergey@lobanov.in</a>>> writes:
<br>> >
<br>> > I'd like to see multiline syslog messages as one line. Is it
<br>> > possible
<br>> > via syslog-ng 3.0?
<br>> >
<br>> > To the best of my knowledge, no. You may be able to do some
<br>> > crude hacks
<br>> > to help the situation, but in general, syslog-ng OSE does not
<br>> > (yet)
<br>> > support multiline syslog messages.
<br>> >
<br>> > --
<br>> > |8]
<br>> >
<br>> > ______________________________________________________________________________
<br>> > Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
<br>> > Documentation:
<br>> > <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
<br>> > FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
<br>> >
<br>> >
<br>> >
<br>> >
<br>> > --
<br>> > Best regards,
<br>> > Koldaev Anton
<br>> >
<br>> >
<br>> >
<br>> >
<br>> > --
<br>> > Best regards,
<br>> > Koldaev Anton
<br>> >
<br>> >
<br>> > ______________________________________________________________________________
<br>> > Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
<br>> > Documentation:
<br>> > <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a> FAQ:
<br>> > <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
<br>> >
<br>>
<br>>
<br>> --
<br>> wbr,
<br>> Sergey V. Lobanov
<br>> Timezone: MSK(GMT+4)
<br>>
<br>> ______________________________________________________________________________
<br>> Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
<br>> Documentation:
<br>> <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a> FAQ:
<br>> <a href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
<br>>
<br><br></p>
</body>
</html>