Hello, I recently setup syslog-ng to use sqlsyslogd to insert syslog information into a MySQL database. After some testing I found that the some extra data is being added to each record only when called by syslog-ng. Each record in the database has <###> where ### is some random number. Has anyone seen this? Thanks, John
2004-06-30, sze keltezéssel 20:22-kor John Jason Brzozowski ezt írta:
Hello,
I recently setup syslog-ng to use sqlsyslogd to insert syslog information into a MySQL database. After some testing I found that the some extra data is being added to each record only when called by syslog-ng. Each record in the database has <###> where ### is some random number. Has anyone seen this?
it is not a random number, it is a combination of the facility and message priority bitmasks represented as a binary number. you can rid of that by using templates. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
On Mon, Jul 05, 2004 at 07:14:41PM +0200, Balazs Scheidler wrote:
2004-06-30, sze keltez?ssel 20:22-kor John Jason Brzozowski ezt ?rta:
Hello,
I recently setup syslog-ng to use sqlsyslogd to insert syslog information into a MySQL database. After some testing I found that the some extra data is being added to each record only when called by syslog-ng. Each record in the database has <###> where ### is some random number. Has anyone seen this?
it is not a random number, it is a combination of the facility and message priority bitmasks represented as a binary number.
you can rid of that by using templates.
Oh yeah, use templates, ignore my message about patching sqlsyslogd. -- Nate "Though this be madness, yet there is method in't." - William Shakespeare, Hamlet
On Wed, Jun 30, 2004 at 02:22:03PM -0400, John Jason Brzozowski wrote:
I recently setup syslog-ng to use sqlsyslogd to insert syslog information into a MySQL database. After some testing I found that the some extra data is being added to each record only when called by syslog-ng. Each record in the database has <###> where ### is some random number. Has anyone seen this?
Yes, it's not extra, but part of every syslog message. If you want to get rid of it even a C novice like me can patch it: I used to cover this on my little syslog loghost howto. I checked out an old copy and put it at http://www.campin.net/newlogcheck-OLD.html#sqlsyslogd It's a simple manual mod to sqlsyslogd to not record the <PRI> info. -- Nate During the million-dollar BIND 9 rewrite, Paul Vixie characterized the original BIND code as 'sleazeware produced in a drunken fury by a bunch of U C Berkeley grad students.' -- D.J. Bernstein http://cr.yp.to/djbdns/blurb/unbind.html
participants (3)
-
Balazs Scheidler
-
John Jason Brzozowski
-
Nate Campi