Hi all!
When I try to capture the EVENT_SOURCE or USERNAME variables within the
template clause, these fields are logged blank in the log file.
here is an excerpt of my configuration file..
destination local6 {
file("/opt/logserver/log4j/$HOST/$YEAR/$MONTH/received.$DAY$MONTH$YEAR.log"
template("$DATE User:$USERNAME $EVENT_SOURCE
$MESSAGE\n") template_escape(yes)
owner(watcher) group(other) create_dirs(yes)); };
anybody knows why this occurs?
Cheers,
Gustavo