<div dir="ltr">Hi,<div>I&#39;m having trouble with getting &quot;good&quot; fields from Jetty.</div><div>I found this:</div><div><a href="http://blog.trifork.com/2010/01/14/logging-to-the-syslog-from-a-java-application/">http://blog.trifork.com/2010/01/14/logging-to-the-syslog-from-a-java-application/</a></div><div>And had my user configure their log4j with the given recommendation, but the events still come in quite poorly.</div><div>Our syslog-ng template uses the following template:</div><div>@${R_UNIXTIME:--}.${R_USEC}\t${HOST:--}\t${PRI:--}\t${PROGRAM:--}\t${MSGONLY}\n&quot;);</div><div><br></div><div>Some sample events:</div><div>@1450275007.912996  host001  173 2015-12-16  16:10:07,836 DEBUG [HeartbeatGeneratorTimer] &lt;-- sessionKey=179: out&gt;{&quot;method&quot;:&quot;Heartbeat&quot;,&quot;jsonrpc&quot;:&quot;2.0&quot;}</div><div><br></div><div>As you can see - this event is sending the date as the program name.</div><div><br></div><div>Another:</div><div><div>@1450275007.924140  host002 13  521 &lt;174&gt;1 2015-12-16T16:10:07+02:00 host002 /openam 1000430466 AUTHENTICATION-303 [logRecord@36733 LoginID=&quot;id=2565a24-0829-11e2-b614-001e371e7e40,ou=user,dc=opensso,dc=java,dc=net&quot; ContextID=&quot;b1de62b91530d5303&quot; IPAddr=&quot;10.3.109.13&quot; LogLevel=&quot;INFO&quot; Domain=&quot;dc=opensso,dc=java,dc=net&quot; ModuleName=&quot;ProfileMapper|Mandate|LDAP&quot; HostName=&quot;10.3.109.13&quot; LoggedBy=&quot;cn=dsameuser,ou=DSAME Users,dc=opensso,dc=java,dc=net&quot; MessageID=&quot;AUTHENTICATION-303&quot; NameID=&quot;&quot; TIME=&quot;2015-12-16 16:10:07&quot;] Logout|service|mailService</div><div><br></div><div>This one is sending the program name as an integer (521)</div><div><br></div><div>There are many others, the program names consist of the following (out of about 100k events):</div><div><div>-</div><div>&quot;</div><div>.0.9&quot;},&quot;parentID&quot;</div><div>...80)</div><div>ame&quot;</div><div>at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)</div><div>del&quot;</div><div>...e.common.AuthenticationFilter.doFilter(AuthenticationFilter.java</div><div>...ee.elion.smarthome.common.AuthenticationFilter.doFilter(AuthenticationFilter.java</div><div>...eJspFile(JspServlet.java</div><div>EST</div><div>in</div><div>,&quot;is_recording&quot;</div><div>iWeather&quot;},{&quot;id&quot;</div><div>leRecordID&quot;</div><div>me&quot;</div><div>model&quot;</div><div>ng&quot;</div><div>ngth&quot;</div><div>...rg.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java</div><div>se,&quot;is_recording&quot;</div><div>....servlet.JspServlet.serviceJspFile(JspServlet.java</div><div>tin</div></div><div><br></div><div><br></div><div>Does anyone have a good way to fix this?</div><div><br></div><div><div class="gmail_signature">______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________</div></div>
</div></div>