<div dir="ltr">Hi, <div><br></div><div>The protocols used in the syslog-ng clients and the syslog-ng server should match.<br></div><div>You posted a source that uses the network() driver - I take this is from your server.</div><div>The destination on your client should also use the network() driver, and that's where you need the flags(syslog-protocol).</div><div><br></div><div>Also check your client config to see if it uses a custom template that messes with the message format.</div><div><br></div><div>Robert</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 17, 2016 at 10:49 AM, Ivan Adji - Krstev <span dir="ltr"><<a href="mailto:akivanradix@gmail.com" target="_blank">akivanradix@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">Any way i put it where i
can and on a client but still nothing. <br>
<br>
Any other hints ?<span class="HOEnZb"><font color="#888888"><br>
<br>
Ivan<br>
</font></span></font><span class=""><br>
<div>On 05/17/2016 10:31 AM, Fabien Wernli
wrote:<br>
</div>
</span><div><div class="h5"><blockquote type="cite">
<pre>Hi,
On Tue, May 17, 2016 at 10:11:27AM +0200, Ivan Adji - Krstev wrote:
</pre>
<blockquote type="cite">
<pre>some RFC model 5424. Is there an option to configure the syslog-ng to
send this messages in that RFC format ?
</pre>
</blockquote>
<pre>Add `flags(syslog-protocol)` to the network destination
______________________________________________________________________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<br>
</div></div></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>