On Tue, Dec 19, 2000 at 05:20:41PM +0100, Victor Barahona wrote:
On Tuesday 19 December 2000 13:25, you wrote:
William Yodlowsky on Mon, Dec 18, 2000 at 11:34:34PM -0500:
On Mon, Dec 18, 2000 at 05:09:20PM -0600, Matt Mencel wrote:
the main reason why you have replaced your original syslog are advanced filtering capabilities .. use them :)
William, I think you missunderstand the question from Matt.
I have been misquoted :) Those words are not mine, but rather they belong to Gregor Binder <gbinder@sysfive.com>
The problem is that this is a normal (local) syslog message:
Tue Dec 19 16:18:14 2000 17 saraksh.alkar.net 65536 /ftp/data/fgf092.zip b _ o a Squid@ ftp 0 * i
This is the same in the log-server from syslog-ng:
Dec 19 16:18:20 local@limonero/limonero ftpd[3065]: [ID 735137 daemon.info] xferlog (send): 25 saraksh.alkar.net 65536 /ftp/data/fgf092.zip b _ o a Squid@ ftp 0 * i
When a program that parse those logs for statistic purpose (as webalizer) its fail because the logs are not in the format the webalizer expect.
I save the problem pre-processing the logs whith a script that write them in the right format in another file and then pass it to webalizer.
¿What are the reason because the syslog-ng use another different format in their logs?
Sorry for my english.