Hi, Unfortunatelly, agent cannot do that. It doesn't parse the message parts coming from file source, just will use the whole line as a full message. If you need these information, you should use patterndb or filters to parse in syslog-ng. On 2011-02-07 12:07, Heinze, René wrote:
Hi,
I´m having the following problem with the Syslog-Agent for Windows:
Our application writes log messages in a log file according the schema: “date + priority + application name + message text”
When the Syslog-ng agent collects those log messages from the file it does not extract date, priority, etc. from the log message but assigns its own values (according its configuration) and uses the entire line as message text.
What we want instead is that the Syslog-ng agent extracts that information from the line and uses only the actual message text as message text.
Is this possible?
Thanks.
René
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html