Thank you very much, It works for me :) 在 2012年4月13日 下午7:31，Julien Groselle <julien.groselle@gmail.com>写道：
Hi,
In documentation 3.1 (page 70) ;)
By default, syslog-ng sends messages using the following template: *$ISODATE $HOST $MSGHDR$MSG\n*.
(The* **$MSGHDR$MSG *part is written together because the *$MSGHDR *macro includes a trailing whitespace.)
--
JG
Le 13 avril 2012 09:04, Fu Ecy <fuzhijie1985@gmail.com> a écrit :
Dear guys:
I use syslog-ng to gather the error log of my system, but now I have a problem. The original log message is like this.
*[2012-04-10 **18:51:30**] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error*
I set the template like this.
*file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY" create_dirs(yes) owner(admin) group(admin) perm(0755) template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );*
Then I get the log like this.
*2012-04-13 14:41:36 s061090.cm5 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error*
The date of original log message has been truncated. If I don't use template, it will be ok. So I wonder what is the default template.
Thank you very much :)
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq