Hi!

I write a program on arduino embended system.
This device do not have Real Time Clock.
I sended UDP syslog datagram from this device.

2016.09.21. 20:19 keltezéssel, Fekete, Róbert írta:

Hi,

The  easiest way to drop the timestamp is on the syslog-ng server side,
where you write the message into a file. There you can use a template,
something like the one below. But why do you want to send a message without
a timestamp?

destination d_file {
    file ("/var/log/messages" template("${MSG}\n") );};



On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <icsuti@zalaszam.hu> wrote:

Hi All!

I would like send UDP message to the syslog server without timestamp.

I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.

The new "RFC 5424 (also called the IETF-syslog protocol): see Section
2.8.2,
IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.

I sended this "<110>1 - hostname procname procid - - Message"

The syslog-ng server logged this:

"Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"

Question:
What is wrong in my message string?
The syslog-ng server why do not decode "1" after ">" as version?
Can i send old syslog message (RFC3164) without timestamp?

Best Regards
Istvan Csuti

____________________________________________________________
__________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?
product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

Hi,

The  easiest way to drop the timestamp is on the syslog-ng server side, where you write the message into a file. There you can use a template, something like the one below. But why do you want to send a message without a timestamp?

destination d_file {
    file ("/var/log/messages" template("${MSG}\n") );
};

On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <icsuti@zalaszam.hu> wrote:

Hi All!

I would like send UDP message to the syslog server without timestamp.

I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.

The new "RFC 5424 (also called the IETF-syslog protocol): see Section 2.8.2,
IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.

I sended this "<110>1 - hostname procname procid - - Message"

The syslog-ng server logged this:

"Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"

Question:
What is wrong in my message string?
The syslog-ng server why do not decode "1" after ">" as version?
Can i send old syslog message (RFC3164) without timestamp?

Best Regards
Istvan Csuti

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

--
Csuti István
rendszergazda
__________________________________________________

Zalaszám Informatika Kft.
8900 Zalaegerszeg, Mártírok útja 53.
Telefon: 92/502-593
Fax: 92/502-501
e-mail: icsuti@zalaszam.hu
web: www.zalaszam.hu

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq