Hi John, John MacDonald wrote:

I am trying to follow the following procedure:

Procedure 3.18. Customizing file messages 1. Start the configuration interface of the syslog-ng Agent for Windows application. 2. Select syslog-ng Agent Settings, right-click on File Sources and select Properties. 3. Type the message format into the Message Template field. You can use date- and file-related macros (see Section 3.6.2, "Macros available in the syslog-ng Agent" (p. 26) for a list of macros). The message customized here is included in the server-specific templates using the MESSAGE macro. By default, the following is sent about file messages: $FILE_NAME: $FILE_MESSAGE. 4. Select Apply, then OK. To activate the changes, restart the syslog-ng Agent service.

My issue is on File Sources>Properties there isn't a Message Template field. Can you tell me if there is another procedure for this?

You are right, it's a bug in the documentation. We changed it in v3.1, the messages templates are on another tab: Select syslog-ng Agent Settings > Destinations > Network, and double-click on IPv4. Select your logserver, and click Edit. Select the Messages tab To change the format of messages received from eventlog sources, type the message format you want to use into the Event Message Format > Message Template field. To change the format of messages received from file sources, type the message format you want to use into the File Message Format > Message Template field.

Thanks.

John

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html

-- pzolee