在 2012年4月13日下午7:31，Julien Groselle <julien.groselle@gmail.com>写道：

Hi,

In documentation 3.1 (page 70) ;)

By default, syslog-ng sends messages using the following template: $ISODATE $HOST $MSGHDR$MSG\n.

(The $MSGHDR$MSG part is written together because the $MSGHDR macro includes a trailing whitespace.)

--
JG

Le 13 avril 2012 09:04, Fu Ecy <fuzhijie1985@gmail.com> a écrit :

Dear guys:

I use syslog-ng to gather the error log of my system, but now I have a problem. The original log message is like this.

[2012-04-10 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error

I set the template like this.

file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY" create_dirs(yes) owner(admin) group(admin) perm(0755) template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );

Then I get the log like this.

2012-04-13 14:41:36 s061090.cm5 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error

The date of original log message has been truncated. If I don't use template, it will be ok. So I wonder what is the default template.

Thank you very much :)

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq