Hi, I forgot to say following: It seems, that $MSGONLY only cuts the first 15 characters of $MSG (please see output below) --- Weitergeleitete Nachricht --- Von: Tob_Sch@gmx.de An: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Betreff: Parameter MSGONLY in syslog-ng.conf doesn't work properly Datum: Thu, 16 Mar 2006 13:08:01 +0100 (MET) Hi, we compiled libol-0.3.17 / syslog-ng-1.6.9 on AIX 5.3. When using following entry in syslog-ng.conf: destination tempfile { file("/tmp/syslog-ng-test.log" template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC $HOST $MSG\n") template-escape(yes)); }; tail -f /tmp/syslog-ng-test.log : 2006-03-16 12:36:39 aixserver auth|security:info sshd[258116]: Connection
from 111.111.111.111 port 48948 :
When using following entry in syslog-ng.conf: destination tempfile { file("/tmp/syslog-ng-test.log" template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC $HOST $MSGONLY\n") template-escape(yes)); }; tail -f /tmp/syslog-ng-test.log : 2006-03-16 12:38:47 aixserver nfo sshd[143710]: Connection from 111.111.111.111 port 64747 : If the destination is not a tempfile but a socket on a remote server, the remote syslog-ng daemon ignores both logs produced with the help parameter $MSG and $MSGONLY. Thanks in advance for help or a patch. -- Echte DSL-Flatrate dauerhaft f�r 0,- Euro*! "Feel free" mit GMX DSL! http://www.gmx.net/de/go/dsl