<div dir="ltr"><div>We have moved from OEL4 to OEL6 and I need help moving the 2.0.4 functionality to the new version of syslog-ng. I am having issues with our custom application logging which has very large messages and long stack traces. I am not seeing the same behavior in 3.2.5. In 3.2.5 I am seeing truncated messages and the first line of the stack trace is being logged to the correct facility local5 while the rest of the stack trace is being logged to /var/log/messages. Also the stack trace is not being preserved anymore. Instead every line is being treated as a new line and a new syslog entry. Our custom app logging is not the best and contains carriage returns which used to be stripped by 2.0.4 but that is not happening now. Can these behaviors from 2.0.4 be preserved in 3.2.5?<br>
<br></div><div>Any suggestions are appreciated.<br></div><div><br></div>Here is what I am trying to work with in 3.2.5<br><br>options {<br>        flush_lines (0);<br>        time_reopen (10);<br>        log_fifo_size (1000);<br>
        long_hostnames (off);<br>        use_dns (yes);<br>        use_fqdn (no);<br>        create_dirs (no);<br>        keep_hostname (yes);<br>        stats_freq (50000);<br>        log_msg_size(8192);<br>};<br><br>source s_sys {<br>
        pipe(&quot;/proc/kmsg&quot; log_prefix(&quot;kernel: &quot;));<br>        unix-dgram (&quot;/dev/log&quot; flags(&quot;no-multi-line&quot;));<br>        internal();<br>        udp(ip(127.0.0.1) port(514));<br>};<br>
<br>destination d_cons { file(&quot;/dev/console&quot;); };<br>destination d_mesg { file(&quot;/var/log/messages&quot; perm(0644)); };<br>destination d_mesgr { udp(&quot;remote syslog server&quot; port(514)); };<br>destination d_auth { file(&quot;/var/log/secure&quot;); };<br>
destination d_authr { udp(&quot;remote syslog server&quot; port(514)); };<br>destination d_mail { file(&quot;/var/log/maillog&quot; flush_lines(10)); };<br>destination d_spol { file(&quot;/var/log/spooler&quot;); };<br>destination d_boot { file(&quot;/var/log/boot.log&quot;); };<br>
destination d_cron { file(&quot;/var/log/cron&quot;); };<br>destination d_cronr { udp(&quot;remote syslog server&quot; port(514)); };<br>destination d_cust_app { file(&quot;/var/log/cust_app.log&quot; owner(&quot;test&quot;) group(&quot;test&quot;) perm(0644)); };<br>
destination d_kern { file(&quot;/var/log/kern&quot;); };<br>destination d_mlal { usertty(&quot;*&quot;); };<br><br>filter f_filter1   { facility(kern); };<br>filter f_filter2   { level(info..emerg) and<br>                     not (facility(mail)<br>
                       or facility(authpriv)<br>                       or facility(cron)<br>                       or facility(local5)); };<br>filter f_filter3   { facility(authpriv); };<br>filter f_filter4   { facility(mail); };<br>
filter f_filter5   { level(emerg); };<br>filter f_filter6   { facility(uucp) or<br>                     (facility(news)<br>                       and level(crit..emerg)); };<br>filter f_filter7   { facility(local7); };<br>
filter f_filter9   { facility(local5); };<br>filter f_filter8   { facility(cron); };<br><br>log { source(s_sys); filter(f_filter1); destination(d_cons); };<br>log { source(s_sys); filter(f_filter1); destination(d_kern); };<br>
log { source(s_sys); filter(f_filter2); destination(d_mesg); };<br>log { source(s_sys); filter(f_filter2); destination(d_mesgr); };<br>log { source(s_sys); filter(f_filter3); destination(d_auth); };<br>log { source(s_sys); filter(f_filter3); destination(d_authr); };<br>
log { source(s_sys); filter(f_filter4); destination(d_mail); };<br>log { source(s_sys); filter(f_filter5); destination(d_mlal); };<br>log { source(s_sys); filter(f_filter6); destination(d_spol); };<br>log { source(s_sys); filter(f_filter7); destination(d_boot); };<br>
log { source(s_sys); filter(f_filter8); destination(d_cron); };<br>log { source(s_sys); filter(f_filter8); destination(d_cronr); };<br>log { source(s_sys); filter(f_filter9); destination(d_cust_app); };<br></div>