<div dir="ltr">I see. Then the easiest is probably to not bother with the timestamp on the sender (arduino) side, and set the keep-timestamp(no) option on the server side.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 21, 2016 at 9:41 PM, Csuti Istvan <span dir="ltr"><<a href="mailto:icsuti@zalaszam.hu" target="_blank">icsuti@zalaszam.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hi!<br>
<br>
I write a program on arduino embended system.<br>
This device do not have Real Time Clock.<br>
I sended UDP syslog datagram from this device.<div><div class="h5"><br>
<br>
2016.09.21. 20:19 keltezéssel, Fekete, Róbert írta:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<pre>Hi,
The easiest way to drop the timestamp is on the syslog-ng server side,
where you write the message into a file. There you can use a template,
something like the one below. But why do you want to send a message without
a timestamp?
destination d_file {
file ("/var/log/messages" template("${MSG}\n") );};
On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <a href="mailto:icsuti@zalaszam.hu" target="_blank"><icsuti@zalaszam.hu></a> wrote:
</pre>
<blockquote type="cite">
<pre>Hi All!
I would like send UDP message to the syslog server without timestamp.
I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.
The new "RFC 5424 (also called the IETF-syslog protocol): see Section
2.8.2,
IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.
I sended this "<110>1 - hostname procname procid - - Message"
The syslog-ng server logged this:
"Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"
Question:
What is wrong in my message string?
The syslog-ng server why do not decode "1" after ">" as version?
Can i send old syslog message (RFC3164) without timestamp?
Best Regards
Istvan Csuti
______________________________<wbr>______________________________
__________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a>
Documentation: <a href="http://www.balabit.com/support/documentation/" target="_blank">http://www.balabit.com/<wbr>support/documentation/</a>?
product=syslog-ng
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a>
</pre>
<br>
<fieldset></fieldset>
<br>
<div dir="ltr">
<div>
<div>Hi, <br>
<br>
</div>
The easiest way to drop the timestamp is on the syslog-ng
server side, where you write the message into a file. There
you can use a template, something like the one below. But
why do you want to send a message without a timestamp?<br>
<pre style="display:table-cell"><span>destination d_file </span><span>{</span><span>
file </span><span>(</span><span>"/var/log/messages"</span><span> </span><span>template</span><span>(</span><span>"${MSG}\n"</span><span>)</span><span> </span><span>);</span><span>
</span><span>};</span></pre>
<br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Wed, Sep 21, 2016 at 7:41 PM,
Csuti Istvan <span dir="ltr"><<a href="mailto:icsuti@zalaszam.hu" target="_blank">icsuti@zalaszam.hu</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi All!<br>
<br>
I would like send UDP message to the syslog server without
timestamp.<br>
<br>
I readed RFC3164 and RFC5424 and
syslog-ng-ose-guide-admin.pdf.<br>
<br>
The new "RFC 5424 (also called the IETF-syslog protocol):
see Section 2.8.2,<br>
IETF-syslog messages (p. 13)" support NIL values "-" in
HEADER.<br>
<br>
I sended this "<110>1 - hostname procname procid - -
Message"<br>
<br>
The syslog-ng server logged this:<br>
<br>
"Sep 21 19:29:54 h164-19 1: - hostname procname procid - -
Message"<br>
<br>
Question:<br>
What is wrong in my message string?<br>
The syslog-ng server why do not decode "1" after ">" as
version?<br>
Can i send old syslog message (RFC3164) without timestamp?<br>
<br>
Best Regards<br>
Istvan Csuti<br>
<br>
______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailm<wbr>an/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support<wbr>/documentation/?product=<wbr>syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/sy<wbr>slog-ng-faq</a><br>
<br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>______________________________<wbr>______________________________<wbr>__________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a>
</pre>
</blockquote>
</blockquote>
<br>
<p><br>
</p>
</div></div><span class="HOEnZb"><font color="#888888"><div>-- <br>
<span></span><small style="font-family:Arial Narrow">
Csuti István <br>
rendszergazda <br>
______________________________<wbr>____________________<br>
<br>
</small>
<img style="font-family:Arial Narrow;width:96px;min-height:95px;float:left" alt="" src="cid:part5.8C04DDA6.ABDD7F52@zalaszam.hu" hspace="10">
<small>
<span style="font-family:Arial Narrow"> Zalaszám Informatika
Kft.
</span><br style="font-family:Arial Narrow">
<span style="font-family:Arial Narrow">
8900 Zalaegerszeg, Mártírok útja 53.
</span><br style="font-family:Arial Narrow">
<span style="font-family:Arial Narrow"> Telefon: 92/502-593
<br style="font-family:Arial Narrow">
Fax: 92/502-501</span>
<br style="font-family:Arial Narrow">
<span style="font-family:Arial Narrow">e-mail: </span><a style="font-family:Arial Narrow" href="mailto:%0Aicsuti@zalaszam.hu%09%09%09" target="_blank">
icsuti@zalaszam.hu</a><span style="font-family:Arial Narrow"><br>
web: </span><a style="font-family:Arial Narrow" href="http://www.zalaszam.hu" target="_blank">www.zalaszam.hu</a><br>
</small>
</div>
</font></span></div>
<br>______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>