syslog-ng

Download

syslog-ng@lists.balabit.hu

December 2009

40 participants
52 discussions

hi all.Why $HOST variable valued "250" , "250-localhost^M" ?
by [焱龙企鹅]韩友洪 01 Dec '09

01 Dec '09

Hi.all I configured syslog-ng (3)(CentOS 5) to collect logs sent by 1xx syslog servers.(freebsd6).I got two strange dirs: "250" and "250-localhost^M" my syslog-ng.conf : ============================================== source s_udp { udp(ip(172.16.18.10) port(514) ); }; destination d_udp_data{ file ("/data3/syslogng/logcollect/$YEAR-$MONTH-$DAY/$HOST/$FACILITY/$PROGRAM.log" create_dirs(yes) template("\n$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC $SOURCEIP $PROGRAM $MSG") ); }; ================================================= my syslog.conf !webface.login *.info /var/log/mail/webface/webface-login.log *.* @172.16.18.10 ======================================= root@localhost 2009-12-01]# pwd /data3/syslogng/logcollect/2009-12-01 [root@localhost 2009-12-01]# ls ............... 10.55.2.35 10.55.2.46 10.55.2.57 10.55.2.68 10.55.2.79 10.55.2.90 250 250-localhost^M [root@localhost 2009-12-01]# ls -R 250 250: user 250/user: 2.1.0.log [root@localhost 2009-12-01]# more 250/user/2.1.0.log 2009-12-01 13:46:12 10.55.2.11 2.1.0 Ok^M 2009-12-01 13:46:27 10.55.2.11 2.1.0 Ok^M ........ [root@localhost 2009-12-01]# ls -R 250-localhost^M/ 250-localhost^M/: user 250-localhost^M/user: 250-SIZE^M.log [root@localhost 2009-12-01]# more 250-localhost^M/user/250-SIZE^M.log 2009-12-01 14:07:44 10.55.2.128 250-SIZE^M 250-8BITMIME^M 250 ENHANCEDSTATUSCODES^M -- 祝：身体安康，万事如意！ ________________________________________________________________ Mr. Hunter - 韩友洪焱龙企鹅 youhong(a)staff.sina.com.cn 新浪 - 产品事业部 -邮箱 MSN：hf_linux(a)msn.com 电话：5392 手机：15001328768 地址：北京市海淀区北四环西路58号理想国际大厦18层 ________________________________________________________________ http://www.sina.com.cn You're the One 新浪.北京一切由你开始

2 1

AUTO: Phil Newlon/Corporate/Wendys is out of the office. (returning 12/02/2009)
by Phil.Newlon＠wendysarbys.com 01 Dec '09

01 Dec '09

I am out of the office until 12/02/2009. I have received the email message that you sent and will respond to it when I return. If you feel your message needs immediate attention, you may call me on my cell at 614-569-1328. Note: This is an automated response to your message "[syslog-ng] hi all.Why $HOST variable valued "250" , "250-localhost^M" ?" sent on 12/1/2009 2:50:50 AM. This is the only notification you will receive while this person is away. Notice: This e-mail message and its attachments are the property of Wendy's/Arby's Group Inc. or one of its subsidiaries and may contain confidential or legally privileged information intended solely for the use of the addressee(s). If you are not an intended recipient, then any use, copying or distribution of this message or its attachments is strictly prohibited. If you received this message in error, please notify the sender and delete this message entirely from your system.

1 0