On Wed, Apr 30, 2003 at 12:22:34PM +0200, Unger, Christian wrote:
Hi,
i log many informations via NT-Syslog to syslog-ng. Windows 2000 have some services with a blank in the Servicename. ex: NTDS ISAM
the log entry from syslog-ng seams as following: Apr 15 15:42:33 ntds isam[info] 700 NTDS (268) Online defragmentation is beginning a full pass on database 'C:\WINNT\NTDS\ntds.dit'.
NTDS ist NOT my hostname, thats the problem!
I think thats the problem is in RFC. But i don't read it. ( no time :[ )
is there a easy escape? or will the next version of syslog-ng have a escape?
try check_hostname(yes)
---- check_hostnames(yes) doesn't help. I checked some information's with tcpdump. An I found a very interest handling. Syslog-ng is able to handle hostnames in syslog datagram, the delimiter between hostname and service name seams to be a space. So if I have spaces in service name syslog-ng thinks that the first word must be the hostname, but that's wrong. What can I do know?