By default, syslog-ng sends messages using the following template: $ISODATE $HOST $MSGHDR$MSG\n.
(The $MSGHDR$MSG part is written together because the $MSGHDR macro includes a trailing whitespace.)
--
JG
Dear guys:I use syslog-ng to gather the error log of my system, but now I have a problem. The original log message is like this.[2012-04-10 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function errorI set the template like this.file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY" create_dirs(yes) owner(admin) group(admin) perm(0755) template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );Then I get the log like this.2012-04-13 14:41:36 s061090.cm5 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function errorThe date of original log message has been truncated. If I don't use template, it will be ok. So I wonder what is the default template.Thank you very much :)
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq