<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Hi Mark,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I'm testing it with 3.19.1 and the following config:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: "Droid Sans Mono", monospace, monospace, "Droid Sans Fallback"; font-weight: normal; font-size: 14px; line-height: 19px;">
<span><span>@version: 3.19</span></span><br>
<br>
<div><span>block destination default_file(</span></div>
<div><span> basepath(</span><span style="color: rgb(206, 145, 120);">'/tmp'</span><span>)</span></div>
<div><span> location(</span><span style="color: rgb(206, 145, 120);">""</span><span>)</span></div>
<div><span> app(</span><span style="color: rgb(206, 145, 120);">""</span><span>)</span></div>
<div><span> name(</span><span style="color: rgb(206, 145, 120);">""</span><span>)</span></div>
<div><span> file_path_args(</span><span style="color: rgb(206, 145, 120);">""</span><span>)</span></div>
<div><span>) {</span></div>
<div><span> file(</span></div>
<div><span> </span><span style="color: rgb(206, 145, 120);">"`basepath`/`location`/`app`/${HOST}/${HOST}_`app``file_path_args`.log"</span></div>
<div><span> persist-name(`name`)</span></div>
<div><span> create_dirs(yes)</span></div>
<div><span> flags(</span><span style="color: rgb(206, 145, 120);">"threaded"</span><span>,
</span><span style="color: rgb(206, 145, 120);">"no-multi-line"</span><span>)</span></div>
<div><span> )</span><span style="color: rgb(106, 153, 85);">;</span></div>
<div><span>}</span><span style="color: rgb(106, 153, 85);">;</span></div>
<br>
<div><span>destination d_default {</span></div>
<div><span> default_file(</span></div>
<div><span> basepath(`BASEPATH`)</span></div>
<div><span> location(</span><span style="color: rgb(206, 145, 120);">"my_location"</span><span>)</span></div>
<div><span> app(</span><span style="color: rgb(206, 145, 120);">"my_app"</span><span>)</span></div>
<div><span> name(</span><span style="color: rgb(206, 145, 120);">'d_default_udp'</span><span>)</span></div>
<div><span> file_path_args(</span><span style="color: rgb(206, 145, 120);">"${session}${some_other_arg}"</span><span>)</span></div>
<div><span> )</span><span style="color: rgb(106, 153, 85);">;</span></div>
<div><span>}</span><span style="color: rgb(106, 153, 85);">;</span></div>
<br>
<div><span>destination d_default_2 {</span></div>
<div><span> default_file(</span></div>
<div><span> basepath(`BASEPATH`)</span></div>
<div><span> location(</span><span style="color: rgb(206, 145, 120);">"my_location"</span><span>)</span></div>
<div><span> app(</span><span style="color: rgb(206, 145, 120);">"my_app"</span><span>)</span></div>
<div><span> name(</span><span style="color: rgb(206, 145, 120);">'d_default_udp_2'</span><span>)</span></div>
<div><span> </span><span style="color: rgb(106, 153, 85);"># file_path_args("${session}${some_other_arg}")</span></div>
<div><span> )</span><span style="color: rgb(106, 153, 85);">;</span></div>
<div><span>}</span><span style="color: rgb(106, 153, 85);">;</span></div>
<br>
<div><span>log {</span></div>
<div><span> source { example-msg-generator()</span><span style="color: rgb(106, 153, 85);">; };</span></div>
<div><span> destination(d_default)</span><span style="color: rgb(106, 153, 85);">;</span></div>
<div><span> destination(d_default_2)</span><span style="color: rgb(106, 153, 85);">;</span></div>
<div><span> rewrite { set(</span><span style="color: rgb(206, 145, 120);">"my_session"</span><span> value(</span><span style="color: rgb(206, 145, 120);">"session"</span><span>))</span><span style="color: rgb(106, 153, 85);">; };</span></div>
<div><span> destination(d_default)</span><span style="color: rgb(106, 153, 85);">;</span></div>
<span><span>}</span><span style="color: rgb(106, 153, 85);">;</span></span></div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
These are the files generated:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: "Droid Sans Mono", monospace, monospace, "Droid Sans Fallback"; font-weight: normal; font-size: 14px; line-height: 19px;">
<span><span>[</span><span style="color: rgb(181, 206, 168);">09</span><span>:</span><span style="color: rgb(181, 206, 168);">59</span><span>][ /tmp/my_location/my_app/alltilla-Precision-</span><span style="color: rgb(181, 206, 168);">5530</span><span> ] $ ls
-algh</span></span>
<div><span>total </span><span style="color: rgb(244, 71, 71);">16K</span></div>
<div><span>drwx------ </span><span style="color: rgb(181, 206, 168);">2</span><span> alltilla
</span><span style="color: rgb(181, 206, 168);">4</span><span>,</span><span style="color: rgb(244, 71, 71);">0K</span><span> máj
</span><span style="color: rgb(181, 206, 168);">20</span><span> </span><span style="color: rgb(181, 206, 168);">09</span><span>:</span><span style="color: rgb(181, 206, 168);">55</span><span> .</span></div>
<div><span>drwx------ </span><span style="color: rgb(181, 206, 168);">3</span><span> alltilla
</span><span style="color: rgb(181, 206, 168);">4</span><span>,</span><span style="color: rgb(244, 71, 71);">0K</span><span> máj
</span><span style="color: rgb(181, 206, 168);">20</span><span> </span><span style="color: rgb(181, 206, 168);">09</span><span>:</span><span style="color: rgb(181, 206, 168);">35</span><span> ..</span></div>
<div><span>-rw------- </span><span style="color: rgb(181, 206, 168);">1</span><span> alltilla
</span><span style="color: rgb(181, 206, 168);">2</span><span>,</span><span style="color: rgb(244, 71, 71);">1K</span><span> máj
</span><span style="color: rgb(181, 206, 168);">20</span><span> </span><span style="color: rgb(181, 206, 168);">09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span> alltilla-Precision-</span><span style="color: rgb(244, 71, 71);">5530_my_app.log</span></div>
<div><span>-rw------- </span><span style="color: rgb(181, 206, 168);">1</span><span> alltilla </span><span style="color: rgb(181, 206, 168);">910</span><span> máj
</span><span style="color: rgb(181, 206, 168);">20</span><span> </span><span style="color: rgb(181, 206, 168);">09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span> alltilla-Precision-</span><span style="color: rgb(244, 71, 71);">5530_my_appmy_session.log</span></div>
</div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
And the syslog-ng -Fedtv output:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<div style="color: rgb(212, 212, 212); background-color: rgb(30, 30, 30); font-family: "Droid Sans Mono", monospace, monospace, "Droid Sans Fallback"; font-weight: normal; font-size: 14px; line-height: 19px;">
<span><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503759</span><span>]
Setting value; name=</span><span style="color: rgb(206, 145, 120);">'MESSAGE'</span><span>, value=</span><span style="color: rgb(206, 145, 120);">'-- Generated message. --'</span><span>, msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></span>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503808</span><span>]
Incoming generated message; msg=</span><span style="color: rgb(206, 145, 120);">'-- Generated message. --'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503840</span><span>]
>>>>>> Source side message processing begin; instance=</span><span style="color: rgb(206, 145, 120);">'internal'</span><span>, location=</span><span style="color: rgb(206, 145, 120);">'/home/alltilla/Work/install/OSE-3.19/etc/syslog-ng.conf:39:12'</span><span>,
msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503864</span><span>]
Setting value; name=</span><span style="color: rgb(206, 145, 120);">'HOST_FROM'</span><span>, value=</span><span style="color: rgb(206, 145, 120);">'alltilla-Precision-5530'</span><span>, msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503879</span><span>]
Setting value; name=</span><span style="color: rgb(206, 145, 120);">'HOST'</span><span>, value=</span><span style="color: rgb(206, 145, 120);">'alltilla-Precision-5530'</span><span>, msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503901</span><span>]
Setting value; name=</span><span style="color: rgb(206, 145, 120);">'SOURCE'</span><span>, value=</span><span style="color: rgb(206, 145, 120);">'#anon-source0'</span><span>, msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.503986</span><span>]
Initializing destination file writer; template=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/${HOST}/${HOST}_my_app${session}${some_other_arg}.log'</span><span>, filename=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_app.log'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504102</span><span>]
affile_open_file; path=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_app.log'</span><span>, fd=</span><span style="color: rgb(206, 145, 120);">'12'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504193</span><span>]
Initializing destination file writer; template=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/${HOST}/${HOST}_my_app.log'</span><span>, filename=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_app.log'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504243</span><span>]
affile_open_file; path=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_app.log'</span><span>, fd=</span><span style="color: rgb(206, 145, 120);">'13'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504277</span><span>]
>>>>>> rewrite rule evaluation begin; rule=</span><span style="color: rgb(206, 145, 120);">'#anon-rewrite0'</span><span>, location=</span><span style="color: rgb(206, 145, 120);">'/home/alltilla/Work/install/OSE-3.19/etc/syslog-ng.conf:42:13'</span><span>,
msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504295</span><span>]
Message was cloned; original_msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span><span>, new_msg=</span><span style="color: rgb(206, 145, 120);">'0x55730675ec00'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504306</span><span>]
Setting value; name=</span><span style="color: rgb(206, 145, 120);">'session'</span><span>, value=</span><span style="color: rgb(206, 145, 120);">'my_session'</span><span>, msg=</span><span style="color: rgb(206, 145, 120);">'0x55730675ec00'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504322</span><span>]
<<<<<< rewrite rule evaluation finished; rule=</span><span style="color: rgb(206, 145, 120);">'#anon-rewrite0'</span><span>, location=</span><span style="color: rgb(206, 145, 120);">'/home/alltilla/Work/install/OSE-3.19/etc/syslog-ng.conf:42:13'</span><span>,
msg=</span><span style="color: rgb(206, 145, 120);">'0x55730675ec00'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504350</span><span>]
Initializing destination file writer; template=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/${HOST}/${HOST}_my_app${session}${some_other_arg}.log'</span><span>, filename=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_appmy_session.log'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504395</span><span>]
affile_open_file; path=</span><span style="color: rgb(206, 145, 120);">'/tmp/my_location/my_app/alltilla-Precision-5530/alltilla-Precision-5530_my_appmy_session.log'</span><span>, fd=</span><span style="color: rgb(206, 145, 120);">'14'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504421</span><span>]
<<<<<< Source side message processing finish; instance=</span><span style="color: rgb(206, 145, 120);">'internal'</span><span>, location=</span><span style="color: rgb(206, 145, 120);">'/home/alltilla/Work/install/OSE-3.19/etc/syslog-ng.conf:39:12'</span><span>,
msg=</span><span style="color: rgb(206, 145, 120);">'0x557306766d60'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504903</span><span>]
Outgoing message; message=</span><span style="color: rgb(206, 145, 120);">'May 20 09:57:55 alltilla-Precision-5530 -- Generated message. --</span><span style="color: rgb(215, 186, 125);">\x0a</span><span style="color: rgb(206, 145, 120);">'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.504984</span><span>]
Outgoing message; message=</span><span style="color: rgb(206, 145, 120);">'May 20 09:57:55 alltilla-Precision-5530 -- Generated message. --</span><span style="color: rgb(215, 186, 125);">\x0a</span><span style="color: rgb(206, 145, 120);">'</span></div>
<div><span>[</span><span style="color: rgb(181, 206, 168);">2021</span><span>-</span><span style="color: rgb(181, 206, 168);">05</span><span>-</span><span style="color: rgb(244, 71, 71);">20T09</span><span>:</span><span style="color: rgb(181, 206, 168);">57</span><span>:</span><span style="color: rgb(181, 206, 168);">55.505017</span><span>]
Outgoing message; message=</span><span style="color: rgb(206, 145, 120);">'May 20 09:57:55 alltilla-Precision-5530 -- Generated message. --</span><span style="color: rgb(215, 186, 125);">\x0a</span><span style="color: rgb(206, 145, 120);">'</span></div>
</div>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
I do not have double quotes appended. Can you send me a similar config, which reproduces your issue?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Thanks!</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Attila</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <mark.faine@nasa.gov><br>
<b>Sent:</b> Wednesday, May 19, 2021 2:30 PM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> Re: [syslog-ng] [EXTERNAL] Re: using VARARGS correctly</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.x_MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif}
p.x_msonormal0, li.x_msonormal0, div.x_msonormal0
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif}
span.x_EmailStyle19
{font-family:"Calibri",sans-serif;
color:#1F497D}
span.x_SpellE
{}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="blue" vlink="purple" style="">
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:#9C6500; font-weight:bold">CAUTION:</span> This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<div>
<div class="x_WordSection1">
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">Thanks, I didn't see anything about the "…" in the documentation.<span style="">
</span>I'll take another look.<span style=""> </span>Your suggestion is what I tried originally, however, the problem is that sometimes the argument is not wanted and I was trying to avoid multiple log paths with separate destinations.<span style="">
</span>If I have a destination in which I sometimes do not add the session argument I get "" appended to my path.</span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">So, in circumstances where I do pass a session it works fine and the session number is appended, however, in cases where the session is not passed I get ""
appended to the end of the log file name. <span style=""> </span>I was trying to use VARARGS only as a way to work around that problem.</span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">Thanks,</span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D">-Mark</span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<div>
<p class="x_MsoNormal" style=""><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">Mark Faine<span style="">
</span></span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">System Administrator</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">SAIC/NICS</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">215 Wynn Dr. 5065</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">Huntsville, AL 35805</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">256-961-1295 (Desk)</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; font-family:"Calibri",sans-serif; color:#1F497D">256-617-4861 (Work Cell)</span></p>
</div>
<p class="x_MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif"> syslog-ng <syslog-ng-bounces@lists.balabit.hu>
<b>On Behalf Of </b>Attila Szakacs (aszakacs)<br>
<b>Sent:</b> Wednesday, May 19, 2021 01:40<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu><br>
<b>Subject:</b> [EXTERNAL] Re: [syslog-ng] using VARARGS correctly</span></p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">Hi Mark,</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">VARARGS is used to pass unknown amount of
<b>options</b> to the underlying driver through the block.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">For example:</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">block destination ewmm(ip(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">'127.0.0.1'</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)
transport(tcp) port(514) ...) { </span></p>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> network(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"`ip`"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> transport(`transport`)
port(`port`)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> template(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"$(format-ewmm)"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> frac-digits(3)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> `__VARARGS__`</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> )</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">}</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">"..." and "__VARARGS__" must be used together.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">In the example above, any option given to the ewmm destination other than ip(), transport() and port(), is passed to the underlying network() destination.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">For your use case, I think a single option would suffice:</span></p>
</div>
<div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">block destination default_file(
</span></p>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> basepath(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">'/var/log/remote/backup'</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> location(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">""</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> app(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">""</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> name(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">""</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> file_path_args(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">""</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">))
{</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> file(</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">
</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"`basepath`/`location`/`app`/${HOST}/${HOST}_`app``file_path_args`.log"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> persist-name(`name`)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> create_dirs(yes)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> flags(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"threaded"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">,
</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"no-multi-line"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> )</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">}</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> </span></p>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">destination d_default {</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> default_file(</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> basepath(`BASEPATH`)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> location(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"$location"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> app(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"$app"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> name(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">'d_default_udp'</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> file_path_args(</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#CE9178">"${session}${some_other_arg}"</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">)</span></p>
</div>
<div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"> )</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<p class="x_MsoNormal" style="line-height:14.25pt; background:#1E1E1E"><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4">}</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#6A9955">;</span><span style="font-size:10.5pt; font-family:"Courier New"; color:#D4D4D4"></span></p>
</div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">With the file_path_args() option you can set any number of optionally available macros in the order you like. If a macro is not available, it will resolve
to empty string.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">Does this take care of your needs?</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">Cheers,</span></p>
</div>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-family:"Calibri",sans-serif; color:black">Attila</span></p>
</div>
<div class="x_MsoNormal" align="center" style="text-align:center"><span style="">
<hr size="2" width="98%" align="center">
</span></div>
<div id="x_divRplyFwdMsg">
<p class="x_MsoNormal" style=""><b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri",sans-serif; color:black"> syslog-ng <<a href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a>>
on behalf of Faine, Mark R. (MSFC-IS40)[NICS] <<a href="mailto:mark.faine@nasa.gov">mark.faine@nasa.gov</a>><br>
<b>Sent:</b> Tuesday, May 18, 2021 8:00 PM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list <<a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>><br>
<b>Subject:</b> [syslog-ng] using VARARGS correctly</span><span style=""> </span>
</p>
<div>
<p class="x_MsoNormal"><span style=""> </span></p>
</div>
</div>
<div>
<div>
<p class="x_MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:11.0pt">CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content
is safe.<br>
<br>
<br>
Syslog-ng 3.19<br>
<br>
block destination d_default(basepath('/var/log/remote/backup') location("") app("") name("")) {<br>
file("`basepath`/`location`/`app`/${HOST}/${HOST}_`app``__VARARGS__`.log"<br>
persist-name(`name`) create_dirs(yes)<br>
flags("threaded", "no-multi-line"));<br>
};<br>
<br>
However, when I call it like so:<br>
<br>
d_default(basepath(`BASEPATH`) location("$location") app("$app") name('d_default_udp') "$session");<br>
<br>
I get a syntax error when checking with --syntax-only<br>
<br>
Error parsing block reference, syntax error, unexpected LL_STRING, expecting ')' in /etc/syslog-ng/conf.d/splunk.conf:<br>
23 categorize_loc();<br>
24 categorize_app();<br>
25 };<br>
26 };<br>
27 destination {<br>
28----> d_default(basepath(`BASEPATH`) location("$location") app("$app") name('d_default_udp') "$session");<br>
28----> ^^^^^^^^^^<br>
<br>
<br>
From looking at the documentation, it looks like it's a valid way to use it. $session here is just a number from 0-9 that is set from rewriting a user defined macro from the message's sessionid field. It's only going to exist for a certain kind of message.<br>
<br>
Thanks,<br>
-Mark<br>
______________________________________________________________________________<br>
Member info: <a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cattila.szakacs%40oneidentity.com%7C4bd6b9fe203b4c924fd408d91ac1d6f3%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637570242110426974%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=OJ1VrDSpxZ3cWMzp3TSj%2FD5AbPrDGTu3%2BjYi3mNtug8%3D&reserved=0" originalsrc="https://lists.balabit.hu/mailman/listinfo/syslog-ng" shash="K+z3xmBqxIlYeVv8B5K8OY/Wa+O6VoGFERTvCPimpq5XqBx1Zvsap61IlIdK253MS+9UnLOy2wnnzHPisrKY4ZaWDVSDBa/1rllLCfhDUnRGNcEw4blS8JpUwQMZgkTzRM1iFEcVOIqXoglIVmE/ecNa+hEMMO/KAkTqfZDvf/o=">
https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7CAttila.Szakacs%40oneidentity.com%7Cd76c6bdac4c64ec8a0fd08d91a26d9ae%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637569576443135501%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=sPCS%2BJNfaqQRl0lODAcJx9vKtYk9W2nCvLhh73%2BS3Rg%3D&reserved=0</a><br>
Documentation: <a href="https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cattila.szakacs%40oneidentity.com%7C4bd6b9fe203b4c924fd408d91ac1d6f3%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637570242110436963%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=9qI6ydL0hL36r5JhPlcQ4OfKUZFCw0WstgsazYfV6kY%3D&reserved=0" originalsrc="http://www.balabit.com/support/documentation/?product=syslog-ng" shash="OO4GOkC6id21oA3M//gVWBTKm7KVnNtJ+yZbfEQCvUkHq5Z6yOV9jBePM9MUa6nGheTuXarMckLfMlLtyeDPQB6DVnvoiT5et441qxkLqFNeBGjTKbvPdVbA2GhWfKvg456YPKomNDFij5eUMHwpHLfjhiefSmKLumGZKcJqpVE=">
https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7CAttila.Szakacs%40oneidentity.com%7Cd76c6bdac4c64ec8a0fd08d91a26d9ae%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637569576443135501%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ZntsaJqT%2Bh5EaUoQf8gb%2BF%2BdXy6LUIgkuLQzxKANitY%3D&reserved=0</a><br>
FAQ: <a href="https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cattila.szakacs%40oneidentity.com%7C4bd6b9fe203b4c924fd408d91ac1d6f3%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637570242110436963%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=N9W7jBvRDdmivJPsAiSAh7GhTHM0Ryylj%2Ft7ZEZW%2F3k%3D&reserved=0" originalsrc="http://www.balabit.com/wiki/syslog-ng-faq" shash="jV2PGstUhfALSwb7ZtgyiDZXK2l6XMmBnFfxFuvYBvsAVvwQduzUghYJTVS41brN1ax4MLZJT9a1ZLawLHz7fU+Yw0T97mJIIYVm+ME9qa4dBjtf8mUSQDsGWTZFMpBegKe2mRM7Lad5A2iwX+uenrnpnKesR4GjZBG7d1j6s5w=">
https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7CAttila.Szakacs%40oneidentity.com%7Cd76c6bdac4c64ec8a0fd08d91a26d9ae%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637569576443135501%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=EvHK7TAM%2B8QsfR8pZBCYNiJ%2BolHT7b2wo3UMwPoorGM%3D&reserved=0</a></span></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>