how to convert multiline message to single line?
Hello, I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0? -- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)
"Sergey V. Lobanov" <sergey@lobanov.in> writes:
I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages. -- |8]
*> no-multi-line*: The *no-multi-line* flag disables line-breaking in the messages; the entire message is converted to a single line. see http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide... for 'multi-line') On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <algernon@balabit.hu> wrote:
"Sergey V. Lobanov" <sergey@lobanov.in> writes:
I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Best regards, Koldaev Anton
Not sure if it's supported in syslog-ng 3.0, a good reason to upgrade BTW. On Fri, Sep 28, 2012 at 5:25 PM, Anton Koldaev <koldaevav@gmail.com> wrote:
*> no-multi-line*: The *no-multi-line* flag disables line-breaking in the messages; the entire message is converted to a single line. see http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide... for 'multi-line')
On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <algernon@balabit.hu> wrote:
"Sergey V. Lobanov" <sergey@lobanov.in> writes:
I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Best regards, Koldaev Anton
-- Best regards, Koldaev Anton
Thank you, Anton! Upgrade is not a problem for me. On 09/28/2012 05:27 PM, Anton Koldaev wrote:
Not sure if it's supported in syslog-ng 3.0, a good reason to upgrade BTW.
On Fri, Sep 28, 2012 at 5:25 PM, Anton Koldaev <koldaevav@gmail.com <mailto:koldaevav@gmail.com>> wrote:
/> no-multi-line/: The /|no-multi-line|/ flag disables line-breaking in the messages; the entire message is converted to a single line.
see http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide... (search for 'multi-line')
On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <algernon@balabit.hu <mailto:algernon@balabit.hu>> wrote:
"Sergey V. Lobanov" <sergey@lobanov.in <mailto:sergey@lobanov.in>> writes:
> I'd like to see multiline syslog messages as one line. Is it possible > via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Best regards, Koldaev Anton
-- Best regards, Koldaev Anton
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)
This may not be the functionality you are looking for. Multi-line messages are possible using udp or rfc5425 style framing (syslog driver) only. ----- Original message -----
Thank you, Anton! Upgrade is not a problem for me.
On 09/28/2012 05:27 PM, Anton Koldaev wrote:
Not sure if it's supported in syslog-ng 3.0, a good reason to upgrade BTW.
On Fri, Sep 28, 2012 at 5:25 PM, Anton Koldaev <koldaevav@gmail.com <mailto:koldaevav@gmail.com>> wrote:
/> no-multi-line/: The /|no-multi-line|/ flag disables line-breaking in the messages; the entire message is converted to a single line.
see http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide... (search for 'multi-line')
On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <algernon@balabit.hu <mailto:algernon@balabit.hu>> wrote:
"Sergey V. Lobanov" <sergey@lobanov.in <mailto:sergey@lobanov.in>> writes:
I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Best regards, Koldaev Anton
-- Best regards, Koldaev Anton
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
no-multi-line flag works for me. Alarm messages from Huawei MA5600T now look good. Thank you all. On 10/02/2012 10:25 PM, Balazs Scheidler wrote:
This may not be the functionality you are looking for. Multi-line messages are possible using udp or rfc5425 style framing (syslog driver) only.
----- Original message -----
Thank you, Anton! Upgrade is not a problem for me.
On 09/28/2012 05:27 PM, Anton Koldaev wrote:
Not sure if it's supported in syslog-ng 3.0, a good reason to upgrade BTW.
On Fri, Sep 28, 2012 at 5:25 PM, Anton Koldaev <koldaevav@gmail.com <mailto:koldaevav@gmail.com> <mailto:koldaevav@gmail.com>> wrote:
/> no-multi-line/: The /|no-multi-line|/ flag disables line-breaking in the messages; the entire message is converted to a single line.
see
http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guide...
(search for 'multi-line')
On Fri, Sep 28, 2012 at 5:02 PM, Gergely Nagy <algernon@balabit.hu <mailto:algernon@balabit.hu> <mailto:algernon@balabit.hu>> wrote:
"Sergey V. Lobanov" <sergey@lobanov.in <mailto:sergey@lobanov.in> <mailto:sergey@lobanov.in>> writes:
I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0?
To the best of my knowledge, no. You may be able to do some crude hacks to help the situation, but in general, syslog-ng OSE does not (yet) support multiline syslog messages.
-- |8]
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Best regards, Koldaev Anton
-- Best regards, Koldaev Anton
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)
participants (4)
-
Anton Koldaev
-
Balazs Scheidler
-
Gergely Nagy
-
Sergey V. Lobanov