Hello ....
New user to syslog-ng but still hoping someone can help me with a small config example
Im forwarding syslog from my syslog-ng but when it arrives it has double timestamps/hostname:
--
Jan 19 11:02:58 cut-hostname 10.229.5.2 32176: Jan 19 11:02:57: %SFF8472-5-THRESHOLD_VIOLATION
--
I have addet this info my config:
options {
use_time_recvd(yes);
keep_hostname(no);
}
also included:
destination udp_forward { udp("<my ip>"); };
template fjern { template("$MSGONLY\n"); };
destination cisco_cupe { file("/var/log/cisco_cupe" template("fjern")); };
log {
source(s_all);
filter(local5);
destination(cisco_cupe);
destination(udp_forward);
};
Cheers
Martin