What is the expected file format used for loggen? i.e: which tokens should each line consist of?
From the docs: http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide...
I'd like to pump a bunch of messages (other than PADPADPAD) through loggen to generate tests. But it doesn't say anything about what format to use. I've tried using just a text file with a message per line, but I get Invalid line X for some messages an not others. Am I just misunderstanding what this command line option is for? Sample Messages: 2012-11-27 08:48:29 16.22.1.42 %SYS-3-CPUHOG: the CPU is hogged 2012-11-27 08:48:29 16.22.2.42 %IR-6-INSCARD: Card inserted in slot 0, interfaces administratively shut down 2012-11-27 08:48:29 16.22.2.42 %OIR-6-REMCARD: Card removed from slot 0, interfaces disabled So it seem I should be able to use: loggen --size 300 --rate 6000 --interval 600 192.168.28.29 514 -R ./myfile.txt but then only some lines work and some don't. Sometimes the host comes in on the receiving server as an invalid IP. Is there a way to specify tokens, like f1=datetime -f2=host -f3=PRI -f4=msg. Would really be nice if we could also specify the delimiter between them, like: f1=datetime -f2=host -f3=PRI -f4=msg --delim=\t ______________________________________________________________ Clayton Dukes ______________________________________________________________