July 2008 - syslog-ng - lists.balabit.hu

weird "program name:" shortening to just "name:"
by Hari Sekhon 03 Jul '08

03 Jul '08

Hi, I've just noticed something very odd in syslog-ng. It shortens the program name without my consent. When I try something like this: logger -t 'Oracle Test Version' testing I get in the logs: Jul 3 10:37:08 hostname Version: testing so it has reduced 'Oracle Test Version' to just 'Version' without my permission... I've done this same test on another server using the classic version of syslog and it works as expected: Jul 3 10:49:06 hostname2 Oracle Test Version: testing I have verified this looks broken across 2 syslog-ng servers and my workstation, but I have no idea why. Does syslog-ng have some specific reason for mangling this? Is there a workaround? (other than just changing to Oracle_Test_Version which I have verified works since it's one word) -h -- Hari Sekhon

3 2

Re: [syslog-ng] syslog-ng-2.1beta1 on NetBSD 3.0, duplicate suppression docs?
by chris packham 02 Jul '08

02 Jul '08

Hi Ed, On Tue, 2008-07-01 at 18:19 -0400, Ed Ravin wrote: > 4) I'm looking for info on how to use the duplicate suppression > option - it doesn't seem to be in the docs included in the source. > Can someone give me a quick summary? This was (IMHO) the only > extant flaw in syslog-ng and I'm looking forward to trying it out! You just need to add suppress(<seconds>) to your destination config. e.g. to suppress duplicate messages that occur within 60 seconds destination d_file { file("/var/log/messages" template(t_logfile) suppress(60)); };

1 0

Latest RHEL5 build doesn't contains fix for PID
by Kostyantyn Gushtin 01 Jul '08

01 Jul '08

Hi, I just download and try latest build 2.1beta2 (syslog-ng-2.1beta1-1.i386.rpm , libdbi8-0.8.2bb2-2.i386.rpm). But I have the same problem with PID macro as before, it contains non valid integer values(some text). I try syslog-ng rpm's for RHEL5. -- Kostyantyn Gushtin Software engineer N-iX LLC Solutions for Your success http://www.n-ix.com

2 3