<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi!<br>
<br>
I write a program on arduino embended system.<br>
This device do not have Real Time Clock.<br>
I sended UDP syslog datagram from this device.<br>
<br>
2016.09.21. 20:19 keltezéssel, Fekete, Róbert írta:<br>
</div>
<blockquote
cite="mid:CAAhEgpqs4vj90_mjxX4YE+5m6DAa1mh3DP63_DMDUTz_HkeuxQ@mail.gmail.com"
type="cite">
<pre wrap="">Hi,
The easiest way to drop the timestamp is on the syslog-ng server side,
where you write the message into a file. There you can use a template,
something like the one below. But why do you want to send a message without
a timestamp?
destination d_file {
file ("/var/log/messages" template("${MSG}\n") );};
On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <a class="moz-txt-link-rfc2396E" href="mailto:icsuti@zalaszam.hu"><icsuti@zalaszam.hu></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi All!
I would like send UDP message to the syslog server without timestamp.
I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.
The new "RFC 5424 (also called the IETF-syslog protocol): see Section
2.8.2,
IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.
I sended this "<110>1 - hostname procname procid - - Message"
The syslog-ng server logged this:
"Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"
Question:
What is wrong in my message string?
The syslog-ng server why do not decode "1" after ">" as version?
Can i send old syslog message (RFC3164) without timestamp?
Best Regards
Istvan Csuti
____________________________________________________________
__________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/">http://www.balabit.com/support/documentation/</a>?
product=syslog-ng
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<div dir="ltr">
<div>
<div>Hi, <br>
<br>
</div>
The easiest way to drop the timestamp is on the syslog-ng
server side, where you write the message into a file. There
you can use a template, something like the one below. But
why do you want to send a message without a timestamp?<br>
<pre class="gmail-prettyprint gmail-synopsis gmail-prettyprinted" style="display:table-cell"><span class="gmail-pln">destination d_file </span><span class="gmail-pun">{</span><span class="gmail-pln">
file </span><span class="gmail-pun">(</span><span class="gmail-str">"/var/log/messages"</span><span class="gmail-pln"> </span><span class="gmail-kwd">template</span><span class="gmail-pun">(</span><span class="gmail-str">"${MSG}\n"</span><span class="gmail-pun">)</span><span class="gmail-pln"> </span><span class="gmail-pun">);</span><span class="gmail-pln">
</span><span class="gmail-pun">};</span></pre>
<br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Sep 21, 2016 at 7:41 PM,
Csuti Istvan <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:icsuti@zalaszam.hu" target="_blank">icsuti@zalaszam.hu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hi All!<br>
<br>
I would like send UDP message to the syslog server without
timestamp.<br>
<br>
I readed RFC3164 and RFC5424 and
syslog-ng-ose-guide-admin.pdf.<br>
<br>
The new "RFC 5424 (also called the IETF-syslog protocol):
see Section 2.8.2,<br>
IETF-syslog messages (p. 13)" support NIL values "-" in
HEADER.<br>
<br>
I sended this "<110>1 - hostname procname procid - -
Message"<br>
<br>
The syslog-ng server logged this:<br>
<br>
"Sep 21 19:29:54 h164-19 1: - hostname procname procid - -
Message"<br>
<br>
Question:<br>
What is wrong in my message string?<br>
The syslog-ng server why do not decode "1" after ">" as
version?<br>
Can i send old syslog message (RFC3164) without timestamp?<br>
<br>
Best Regards<br>
Istvan Csuti<br>
<br>
______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a moz-do-not-send="true"
href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"
rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a moz-do-not-send="true"
href="http://www.balabit.com/support/documentation/?product=syslog-ng"
rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a moz-do-not-send="true"
href="http://www.balabit.com/wiki/syslog-ng-faq"
rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
</blockquote>
<br>
<p><br>
</p>
<div class="moz-signature">-- <br>
<title>sig</title>
<span class="moz-txt-tag"></span><small style="font-family: Arial
Narrow;">
Csuti István <br>
rendszergazda <br>
__________________________________________________<br>
<br>
</small>
<img style="font-family: Arial Narrow; width: 96px; height: 95px;
float: left;" alt=""
src="cid:part5.8C04DDA6.ABDD7F52@zalaszam.hu" hspace="10">
<small>
<span style="font-family: Arial Narrow;"> Zalaszám Informatika
Kft.
</span><br style="font-family: Arial Narrow;">
<span style="font-family: Arial Narrow;">
8900 Zalaegerszeg, Mártírok útja 53.
</span><br style="font-family: Arial Narrow;">
<span style="font-family: Arial Narrow;"> Telefon: 92/502-593
<br style="font-family: Arial Narrow;">
Fax: 92/502-501</span>
<br style="font-family: Arial Narrow;">
<span style="font-family: Arial Narrow;">e-mail: </span><a
style="font-family: Arial Narrow;"
class="moz-txt-link-abbreviated"
href="mailto:%0Aicsuti@zalaszam.hu%09%09%09">
icsuti@zalaszam.hu</a><span style="font-family: Arial Narrow;"><br>
web: </span><a style="font-family: Arial Narrow;"
href="http://www.zalaszam.hu">www.zalaszam.hu</a><br>
</small>
</div>
</body>
</html>