19 Jan
2010
19 Jan
'10
11:45 a.m.
On Tue, 2010-01-19 at 11:08 +0100, Marty Sørensen wrote:
Hello ....
New user to syslog-ng but still hoping someone can help me with a small config example
Im forwarding syslog from my syslog-ng but when it arrives it has double timestamps/hostname: -- Jan 19 11:02:58 cut-hostname 10.229.5.2 32176: Jan 19 11:02:57: % SFF8472-5-THRESHOLD_VIOLATION --
Your Cisco gear is including sequence number in the timestamp which syslog-ng doesn't recognize. That's the "32176: " prefix before the 2nd timestamp. If you disable that, it'll work. I'm planning to add support for this field in the future. -- Bazsi