4 Feb
2011
4 Feb
'11
3:34 a.m.
On Thu, Feb 03, 2011 at 05:11:08PM -0800, Lance Laursen wrote:
Unfortunately it is showing up in logs as this:
2011-02-03T22:45:30+00:00 localhost 1 2011-02-03T22:14:15.003Z superhostomg process - ID47 [exampleSDID@32473 iut="9" eventSource="rawr" eventID="69"] Message portion. Test log with structured data.
So all of the metadata is being printed to $MSG. What am I doing wrong?
Depending on syslog-ng version you probably need this flag: syslog-protocol http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-v3.2-guid... Regards, Matthew.