Configuration is simple with default config only I have added a destination syslog () to send to UDP remote host listening on 514 port On Wed, Nov 27, 2019 at 7:11 PM Gabor Nagy (gnagy) < Gabor.Nagy@oneidentity.com> wrote:
Hello,
Syslog-ng does not always put the sequenceId into SDATA, for example logs from a local file will have a seqnum and when forwarded it will have this SDATA field. More info about this can be found under SEQNUM macro in our admin guide:
https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit...
Well, I don't know a quick solution (e.g. a config option to disable this), I'll try to help you.
Can you share your configuration, please?
Regards, Gabor ------------------------------ *From:* syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Debjyoti Mukherjee <debmukhra@gmail.com> *Sent:* Tuesday, November 26, 2019 16:17 *To:* syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu> *Subject:* [syslog-ng] Structure data set to "-"
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
Hello
Trying to send logs to remote syslog server in RFC 5424 format. The STRUCTURE_DATA should be set to "-".
What is the way to the this value to "-"
Currently it is coming as [meta sequenceId="21"]. I am using Openwrt and the syslog version is 3.24
Thank you
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq