10 Dec
2008
10 Dec
'08
10:37 p.m.
On Wed, 2008-12-10 at 15:30 -0600, John Skopis wrote:
Hello, I believe that the log4j SyslogAppender is sending logs to syslog-ng that begin with a '\t' (or four spaces).
The leading whitespace is trimmed either because it's not allowed per the syslog RFC, or for some other (hopefully) good reason.
Can I turn this behavior off?
an example would be a message: Dec 10 16:17:52 testbox at java.lang.Thread.run(Thread.java:619) which should be Dec 10 16:17:52 testbox \tat java.lang.Thread.run(Thread.java:619)
I've just checked with syslog-ng OSE 2.1, and the tabs stay where they are. It should be the same with syslog-ng OSE 2.0 Can you strace/tcpdump the exact traffic as it is received by syslog-ng? -- Bazsi