On Thu, Aug 08, 2002 at 01:33:32PM -0700, Andan Lauber wrote:
heya, i've not seen it do it, but i've only the one host running syslog-ng as a central loghost, with generic syslogs reporting to it, but does syslog-ng deal with repeat messages like generic syslog does, in this fashion?
host.domain.tld message repeated 4 times
or does it just spew out the message again?
it recognizes last message repeated messages, but does not modify them. This means that the whole 'last message' repeated line will be $MSG when written to output (earlier the word 'last' became hostname ...) So if you do a template output like this: destination d_file { file("/var/log/messages" template("$DATE $HOST $MSG\n")); }; this should insert the host syslog-ng received the message from.
thanks. (and as a side, if any know of a way to STOP generic syslog from doing this, i'd love to hear it. i'm hoping the answer is "install syslog-ng")
dunno, install syslog-ng is certainly a solution. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1