Thank you very much, It works for me :) 在 2012年4月13日 下午7:31，Julien Groselle <julien.groselle@gmail.com>写道：

Hi,

In documentation 3.1 (page 70) ;)

By default, syslog-ng sends messages using the following template: *$ISODATE $HOST $MSGHDR$MSG\n*.

(The* **$MSGHDR$MSG *part is written together because the *$MSGHDR *macro includes a trailing whitespace.)

--

JG

Le 13 avril 2012 09:04, Fu Ecy <fuzhijie1985@gmail.com> a écrit :

...

Dear guys:

I use syslog-ng to gather the error log of my system, but now I have a problem. The original log message is like this.

*[2012-04-10 **18:51:30**] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error*

I set the template like this.

*file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY" create_dirs(yes) owner(admin) group(admin) perm(0755) template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );*

Then I get the log like this.

*2012-04-13 14:41:36 s061090.cm5 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER: queryparser doRewrite function error*

The date of original log message has been truncated. If I don't use template, it will be ok. So I wonder what is the default template.

Thank you very much :)

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq

______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq