<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Hi!<br>
      <br>
      I write a program on arduino embended system.<br>
      This device do not have Real Time Clock.<br>
      I sended UDP syslog datagram from this device.<br>
      <br>
      2016.09.21. 20:19 keltezéssel, Fekete, Róbert írta:<br>
    </div>
    <blockquote
cite="mid:CAAhEgpqs4vj90_mjxX4YE+5m6DAa1mh3DP63_DMDUTz_HkeuxQ@mail.gmail.com"
      type="cite">
      <pre wrap="">Hi,

The  easiest way to drop the timestamp is on the syslog-ng server side,
where you write the message into a file. There you can use a template,
something like the one below. But why do you want to send a message without
a timestamp?

destination d_file {
    file ("/var/log/messages" template("${MSG}\n") );};



On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <a class="moz-txt-link-rfc2396E" href="mailto:icsuti@zalaszam.hu">&lt;icsuti@zalaszam.hu&gt;</a> wrote:

</pre>
      <blockquote type="cite">
        <pre wrap="">Hi All!

I would like send UDP message to the syslog server without timestamp.

I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.

The new "RFC 5424 (also called the IETF-syslog protocol): see Section
2.8.2,
IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.

I sended this "&lt;110&gt;1 - hostname procname procid - - Message"

The syslog-ng server logged this:

"Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"

Question:
What is wrong in my message string?
The syslog-ng server why do not decode "1" after "&gt;" as version?
Can i send old syslog message (RFC3164) without timestamp?

Best Regards
Istvan Csuti

____________________________________________________________
__________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/">http://www.balabit.com/support/documentation/</a>?
product=syslog-ng
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>



</pre>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <div dir="ltr">
          <div>
            <div>Hi, <br>
              <br>
            </div>
            The  easiest way to drop the timestamp is on the syslog-ng
            server side, where you write the message into a file. There
            you can use a template, something like the one below. But
            why do you want to send a message without a timestamp?<br>
            <pre class="gmail-prettyprint gmail-synopsis gmail-prettyprinted" style="display:table-cell"><span class="gmail-pln">destination d_file </span><span class="gmail-pun">{</span><span class="gmail-pln">
    file </span><span class="gmail-pun">(</span><span class="gmail-str">"/var/log/messages"</span><span class="gmail-pln"> </span><span class="gmail-kwd">template</span><span class="gmail-pun">(</span><span class="gmail-str">"${MSG}\n"</span><span class="gmail-pun">)</span><span class="gmail-pln"> </span><span class="gmail-pun">);</span><span class="gmail-pln">
</span><span class="gmail-pun">};</span></pre>
            <br>
          </div>
        </div>
        <div class="gmail_extra"><br>
          <div class="gmail_quote">On Wed, Sep 21, 2016 at 7:41 PM,
            Csuti Istvan <span dir="ltr">&lt;<a moz-do-not-send="true"
                href="mailto:icsuti@zalaszam.hu" target="_blank">icsuti@zalaszam.hu</a>&gt;</span>
            wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi All!<br>
              <br>
              I would like send UDP message to the syslog server without
              timestamp.<br>
              <br>
              I readed RFC3164 and RFC5424 and
              syslog-ng-ose-guide-admin.pdf.<br>
              <br>
              The new "RFC 5424 (also called the IETF-syslog protocol):
              see Section 2.8.2,<br>
              IETF-syslog messages (p. 13)" support NIL values "-" in
              HEADER.<br>
              <br>
              I sended this "&lt;110&gt;1 - hostname procname procid - -
              Message"<br>
              <br>
              The syslog-ng server logged this:<br>
              <br>
              "Sep 21 19:29:54 h164-19 1: - hostname procname procid - -
              Message"<br>
              <br>
              Question:<br>
              What is wrong in my message string?<br>
              The syslog-ng server why do not decode "1" after "&gt;" as
              version?<br>
              Can i send old syslog message (RFC3164) without timestamp?<br>
              <br>
              Best Regards<br>
              Istvan Csuti<br>
              <br>
              ______________________________<wbr>______________________________<wbr>__________________<br>
              Member info: <a moz-do-not-send="true"
                href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
                rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
              Documentation: <a moz-do-not-send="true"
                href="http://www.balabit.com/support/documentation/?product=syslog-ng"
                rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
              FAQ: <a moz-do-not-send="true"
                href="http://www.balabit.com/wiki/syslog-ng-faq"
                rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
              <br>
              <br>
            </blockquote>
          </div>
          <br>
        </div>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>

</pre>
      </blockquote>
    </blockquote>
    <br>
    <p><br>
    </p>
    <div class="moz-signature">-- <br>
      <title>sig</title>
      <span class="moz-txt-tag"></span><small style="font-family: Arial
        Narrow;">
        Csuti István <br>
        rendszergazda <br>
        __________________________________________________<br>
        <br>
      </small>
      <img style="font-family: Arial Narrow; width: 96px; height: 95px;
        float: left;" alt=""
        src="cid:part5.8C04DDA6.ABDD7F52@zalaszam.hu" hspace="10">
      <small>
        <span style="font-family: Arial Narrow;"> Zalaszám Informatika
          Kft.
        </span><br style="font-family: Arial Narrow;">
        <span style="font-family: Arial Narrow;">
          8900 Zalaegerszeg, Mártírok útja 53.
        </span><br style="font-family: Arial Narrow;">
        <span style="font-family: Arial Narrow;"> Telefon: 92/502-593
          <br style="font-family: Arial Narrow;">
          Fax: 92/502-501</span>
        <br style="font-family: Arial Narrow;">
        <span style="font-family: Arial Narrow;">e-mail: </span><a
          style="font-family: Arial Narrow;"
          class="moz-txt-link-abbreviated"
          href="mailto:%0Aicsuti@zalaszam.hu%09%09%09">
          icsuti@zalaszam.hu</a><span style="font-family: Arial Narrow;"><br>
          web: </span><a style="font-family: Arial Narrow;"
          href="http://www.zalaszam.hu">www.zalaszam.hu</a><br>
      </small>
    </div>
  </body>
</html>