The file test.log is the input for logger: $ logger -f test.log -p local6.info -t TEST The result is given by the file local6.log As you can see, the part : " log. hello this is the second "is missing (31 characters). The syslog header is 31 char long. I've also post the result of the strace (strace.txt). The useful part seems to be at line 119: send(1, "<182>Jan 5 13:04:01 TESTSAP: Fi"..., 1053, MSG_NOSIGNAL) = 1053 time(NULL) = 1231157041 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=1920, ...}) = 0 send(1, "<182>Jan 5 13:04:01 TESTSAP: lo"..., 66, MSG_NOSIGNAL) = 66 read(0, "", 4096) = 0 close(1) = 0 Thanks. G. 2009/1/5 Geller, Sandor (IT) <Sandor.Geller@morganstanley.com>
Hi,
Using logger command, I'm trying to send long messages to syslog-ng. I'm aware that messages cannot be too long (UDP limitation). The problem is that logger doesn't just cut my log, it also remove some part of the log replacing it with the syslog header. Needless to say, this information is crucial to me.
Well, UDP itself allows to send data up to 64k, as IP itself handles fragmentation/ reassembling. What kind of messages are you trying to log? logger shouldn't replace anything. It simply uses openlog and syslog under the hood, so the log gets prepended by the facility/severity information and the timestamp.
Did you straced logger?
Regards,
Sandor --------------------------------------------------------
NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html