27 Sep
2011
27 Sep
'11
7:22 p.m.
On Fri, 2011-09-23 at 13:49 -0400, Clayton Dukes wrote:
But not everything sends a sequence number (or does syslog-ng have an internal one?)
Yup, SEQNUM is related to the structured data [meta sequenceId] (defined by RFC5424. It is defined to be a counter on a hop-by-hop basis, so it is only defined at the destination side (and is different for different tcp destinations even for the same message). I have $RCPTID in mind, which would be unique for each received message, but that doesn't exist yet. If using 3.3, it'd be very simple to create a filter plugin that distributes messages evenly. -- Bazsi