On Mon, 2009-03-02 at 15:11 +0100, Xavier Lapie wrote:
Hi,
I often meet the case where I need to centralize some purely applicative log messages (ie they don't even have a PRI header). So syslog-ng sets a default facility and severity for these messages, like kern facility and emergency severity for a source file with a "no-parse" option.
Is there a clean way to change these default values by modifying the configuration file ? (and not using a source program() nor a tail | logger trick).
I've already written a quick and dirty patch for my needs, but it would be great to have a native way of doing the same thing (I may have missed something in the documentation).
In 3.0 OSE there are options to set these for file sources, but no options to set them for no-parse sources. I'll take care about this when I get there, but please file a bugzilla ticket. Alternatively you could submit your patches, that could potentially solve this problem faster. -- Bazsi