I've just noticed this problem when there is a \n embedded in the message, too (in 1.5.10). The stock Solaris syslog, keeps the \n and following string in the same log entry, syslog-ng is splitting it into a new entry and then concatenating the next message onto it. ---Jim Solaris syslogd: ---------------- Oct 23 13:28:41 altiga1 32467 10/23/2001 13:28:43.020 SEV=4 IKE/119 RPT=859 a.b.c.d Group [employee] User [e002808]\nPHASE 1 COMPLETED syslog-ng: ---------- Oct 23 12:29:04 altiga2 4851 10/23/2001 12:29:03.800 SEV=4 IKE/119 RPT=90 e.f.g.h Group [employee] User [e008694] Oct 23 12:29:04 altiga2 PHASE1 COMPLETED<149>4853 10/32/2001 12:29:03.800 SEV=5 IKE/25 RPT=262 e.f.g.h Group [employee] User [e008694] Received remote Proxy Host data in ID Payload: Address 192.168.0.191, Protocol 0, Port 0 -----Original Message----- From: todd glassey [mailto:todd.glassey@worldnet.att.net] Sent: Monday, October 15, 2001 6:42 PM To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng]Syslog-ng overflow issue Or replicate the previous header and open a new line for this message content - which seems like it would be a whole lot more useful... T. ----- Original Message ----- From: "Mike Kelland" <MKelland@jetnet.ca> To: <syslog-ng@lists.balabit.hu> Sent: Monday, October 15, 2001 1:11 PM Subject: [syslog-ng]Syslog-ng overflow issue

I'm having a problem where if a syslog message is sent to syslog-ng which exceeds a certain length, the piece of the message which was truncated off the end is appended to the beginning of the next message sent. Is there a way to cause syslog-ng to instead simply loose this truncated piece?

Thanks, Mike Kelland

<<...OLE_Obj...>> Michael Kelland Internetworking Applications Engineer 333 Preston Street, 3rd Floor, Ottawa, Ontario. K1S 5N4 Ph. (613) 237-5995, ext 248 Fax(613) 237-9002 www.JETNET.ca mkelland@JETNET.ca

This communication contains confidential information intended solely for the use of the individual/s and/or entity or entities to whom it was intended to be addressed. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this transmission is prohibited. If you have received this communication in error, please contact the sender immediately, delete the communication from your system and do not disclose its contents to any third party or use its contents. Any opinions expressed are soley those of the author and do not necessariy represent those of JETNET Internetworking Services Inc. unless otherwise specifically stated.

_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng