On Feb 21, 2014 9:50 AM, "David Schweikert" <david@schweikert.ch> wrote:

On Wed, Feb 19, 2014 at 23:12:28 +0100, Jakub Jankowski wrote:
> Use a template() that utilizes $(substr) template function. See
> http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.4-guides/en/syslog-ng-ose-v3.4-guide-admin/html/reference-template-functions.html
> for more details.

For the records: it seems to work nicely. I use it as follows:

  template t_legacy_bsd {
      template("$(substr \"<$PRI>$DATE $HOST $MSGHDR$MSG\" \"0\" \"1023\")\n");
      template_escape(no);
  };

Cheers
David
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq