>>>>> "Delon" == Delon Lee Di Lun <lee.delon2005@gmail.com> writes:

    Delon> In response to gergely, the 2nd option would require the changes to be made
    Delon> on the "apache side" of things right? If so, its unlikely possible in my
    Delon> use case.

No, you can do that with rsyslog and syslog-ng too. Both allow you to
tinker with the syslog headers.

Ideally, changing the Apache-generated log format to conform to a syslog
RFC would be ideal, but I understand that's not something most are
willing - or able/allowed - to make. So the next best option is to
fiddle with the syslog fields on the syslog side of things.

--
|8]