[Bug 172] New: tcp() destination driver ignores ts_format() parameter
https://bugzilla.balabit.com/show_bug.cgi?id=172 Summary: tcp() destination driver ignores ts_format() parameter Product: syslog-ng Version: 3.3.x Platform: PC OS/Version: Linux Status: NEW Severity: minor Priority: unspecified Component: syslog-ng AssignedTo: bazsi@balabit.hu ReportedBy: chiestand@salk.edu Type of the Report: bug Estimated Hours: 0.0 The documentation (http://www.balabit.com/sites/default/files/syslog-ng-ose-v3.3-guide-admin-en...) states that you may use the ts_format() paramater to modify the timestamp format. However this parameter does not work, rfc3164 format seems to be used no matter what you specify in ts_format(). So either the documentation is wrong or there is a bug. I am running 3.3.4 on Debian Wheezy. I also had the problem running 3.1 in Debian Squeeze. my driver: destination My_Syslog { tcp("syslog.server.salk.edu" port(514) ts_format(iso) ); }; log { source(s_src); destination(My_Syslog); }; tcpdump: @.m..<hw<86>Apr 6 01:24:01 host CRON[1923]: pam_unix(cron:session): session closed for user root I emailed the mailing list on this issue, the thread can be viewed here: https://lists.balabit.hu/pipermail/syslog-ng/2012-April/018638.html -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 Balazs Scheidler <bazsi@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |frobert@balabit.hu --- Comment #1 from Balazs Scheidler <bazsi@balabit.hu> 2012-04-16 11:20:03 --- Like discussed on the mailing list, I feel this is a documentation bug. The current behaviour is correct. You can however change the timestamp used by using a custom template, either defined globally or at the destination. e.g.: template t_isostamp { template("$ISODATE $HOST $MSGHDR$MSG\n"); }; options { proto-template(t_isostamp); }; OR: destination d_tcp { tcp("1.2.3.4" template("$ISODATE $HOST $MSGHDR$MSG\n")); }; Robi, can you please update this in the documentation? Thanks. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 --- Comment #2 from Balazs Scheidler <bazsi@balabit.hu> 2012-05-01 13:25:22 --- There was a followup discussion on the mailing list and had some further thought. This is indeed a bug and should be fixed, not just in the documentation. Here's my last email on the subject that tried to summarize what should be done: https://lists.balabit.hu/pipermail/syslog-ng/2012-May/018748.html Anyone volunteering with a patch? -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 Gergely Nagy <algernon@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |3.4.1 CC| |algernon@balabit.hu AssignedTo|bazsi@balabit.hu |algernon@balabit.hu --- Comment #3 from Gergely Nagy <algernon@balabit.hu> 2012-11-10 16:47:06 --- I'll prepare a patch for 3.4 (at some point, hopefully soon)... -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 Gergely Nagy <algernon@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 Gergely Nagy <algernon@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|3.4.1 |--- --- Comment #4 from Gergely Nagy <algernon@balabit.hu> 2013-01-15 12:20:53 --- This fell through the cracks, so won't be in 3.4, but I'll keep it on my 3.5 todo list. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugzilla.balabit.com/show_bug.cgi?id=172 --- Comment #5 from Robert Fekete <frobert@balabit.hu> 2013-02-13 15:07:12 --- I have added a note in the 3.4 adminguide, it will be released later this week. Also I hope to backport it to the 3.3 adminguide. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.
participants (1)
-
bugzilla@bugzilla.balabit.com