Thank you so much, Sandor.

I will try this method today, and let you know the result..

By the way, is there any material about the usage of macros in templates, that's very helpful for us to use the syslog-ng tool.



Inactive hide details for "Geller, Sandor \(IT\)" <Sandor.Geller@morganstanley.com>"Geller, Sandor \(IT\)" <Sandor.Geller@morganstanley.com>


          "Geller, Sandor \(IT\)" <Sandor.Geller@morganstanley.com>
          Sent by: syslog-ng-bounces@lists.balabit.hu

          2008-06-30 23:41
          Please respond to
          "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu>


To

"'Syslog-ng users' and developers' mailing list'" <syslog-ng@lists.balabit.hu>

cc


Subject

Re: [syslog-ng] logging facility in log file

Hi,

> Thank you, Sandor.
>
> I have read the syslog-ng documentation, and only found a
> FACILITY and PRIORITY sample in it, such as:
> destination hosts { file("/var/log/syslogs/$HOST/$FACILITY"
> owner(root) group(root) perm(0600) dir_perm(0700) create_dirs(yes));};
>
> but my purpose is not to log these message into a file named
> as FACILITY, but to include this FACILITY in my log files,
> for example:
> Jun 25 20:53:34 c890f12ec07 local6:warn|warning c890f12ec07
> root: sunjing test 1
>
> "local6:warn" is what I wanted in the log file....could you help?

Sorry, I forgot that the doc doesn't provide too much details about
macro usage. You can use these macros in templates too, for example:

destination d_something {
 file( "/var/log/something"
   template("$ISODATE $FACILITY:$PRIORITY $MSG\n";
 );
};

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
______________________________________________________________________________
Member info:
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation:
http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ:
http://www.campin.net/syslog-ng/faq.html