<p dir="ltr">By using apostrophes instead of quotes you can get rid of those ugly backslashes.</p>
<div class="gmail_quote">On Feb 21, 2014 9:50 AM, &quot;David Schweikert&quot; &lt;<a href="mailto:david@schweikert.ch">david@schweikert.ch</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On Wed, Feb 19, 2014 at 23:12:28 +0100, Jakub Jankowski wrote:<br>
&gt; Use a template() that utilizes $(substr) template function. See<br>
&gt; <a href="http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.4-guides/en/syslog-ng-ose-v3.4-guide-admin/html/reference-template-functions.html" target="_blank">http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.4-guides/en/syslog-ng-ose-v3.4-guide-admin/html/reference-template-functions.html</a><br>

&gt; for more details.<br>
<br>
For the records: it seems to work nicely. I use it as follows:<br>
<br>
  template t_legacy_bsd {<br>
      template(&quot;$(substr \&quot;&lt;$PRI&gt;$DATE $HOST $MSGHDR$MSG\&quot; \&quot;0\&quot; \&quot;1023\&quot;)\n&quot;);<br>
      template_escape(no);<br>
  };<br>
<br>
Cheers<br>
David<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>