This looks.like the format that should be supported by indented-multi-line On Jul 5, 2013 9:33 PM, "Satish Patel" <satish.txt@gmail.com> wrote:
Here is my tomcat catalina.out log file sample. See there is a tab space in logs
2013-06-27 05:30:00,065 [EDISN-Scheduler_Worker-2] ERROR com.example.edisn.sftp.SftpSession - Exception attempting to work with an SFTP Session: connection is closed by foreign host 2013-06-27 05:30:00,066 [EDISN-Scheduler_Worker-2] ERROR org.quartz.core.JobRunShell - Job EDISN.CTMS_Upload threw an unhandled Exception: com.example.edisn.EdisnRuntimeException: Exception attempting to work with an SFTP Session: connection is closed by foreign host at com.example.edisn.sftp.SftpSession.doSession(SftpSession.java:64) at com.example.edisn.EdisnSession.exec(EdisnSession.java:13) at com.example.ctms.CtmsScheduledJob.executeInternal(CtmsScheduledJob.java:27) at org.springframework.scheduling.quartz.QuartzJobBean.execute(QuartzJobBean.java:86) at org.quartz.core.JobRunShell.run(JobRunShell.java:202) at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525) Caused by: com.jcraft.jsch.JSchException: connection is closed by foreign host at com.jcraft.jsch.Session.connect(Unknown Source) at com.jcraft.jsch.Session.connect(Unknown Source) at com.example.edisn.sftp.SftpSession.doSession(SftpSession.java:45) ... 5 more
On Fri, Jul 5, 2013 at 3:27 PM, Balazs Scheidler <bazsi77@gmail.com>wrote:
No, I implemented a different multiline style support first (that is not in pe), where continuation lines are indicated by indentation, like mime.
Iirc tomcat has this kind of log file. Can you show a sample log entry?
The infrastructure for multiline-prefix is also there but not added yet.
Let me see the sample, I'll tell if the current solution works or not. On Jul 5, 2013 8:24 PM, "Satish Patel" <satish.txt@gmail.com> wrote:
Thanks for reply Balazs,
You mean say this feature is available in Open Source Edition (OSE) 3.4? Once after specifying flag "indented-multi-line" i can use multi-line-prefix?
On Fri, Jul 5, 2013 at 1:26 PM, Balazs Scheidler <bazsi77@gmail.com>wrote:
You have found the PE documentation but I have already ported this to the OSE tree and has been released as part of 3.4.
You have to specify indented-multi-line as a flag to the file source. On Jul 5, 2013 6:28 PM, "Satish Patel" <satish.txt@gmail.com> wrote:
We have tomcat shop and at everyone know tomcat has a java call trace in logs with tab space but syslog-ng doesn't know about it and printing lines as a new line. I have read here syslog-ng 3.x does support multi-line logs http://www.balabit.com/sites/default/files/documents/syslog-ng-pe-4.0-guides...
But does this feature available in Open Source syslog-ng? If yes then why its not working for me?
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq