[syslog-ng]Can I prevent syslog-ng from prepending logs from other servers?
William Yodlowsky
wyodlows@andromeda.rutgers.edu
Tue, 19 Dec 2000 12:32:58 -0500
On Tue, Dec 19, 2000 at 05:20:41PM +0100, Victor Barahona wrote:
> On Tuesday 19 December 2000 13:25, you wrote:
> >William Yodlowsky on Mon, Dec 18, 2000 at 11:34:34PM -0500:
> >> On Mon, Dec 18, 2000 at 05:09:20PM -0600, Matt Mencel wrote:
> >
> >the main reason why you have replaced your original syslog are
> >advanced filtering capabilities .. use them :)
>
> William, I think you missunderstand the question from Matt.
I have been misquoted :) Those words are not mine, but rather they
belong to Gregor Binder <gbinder@sysfive.com>
> The problem is that this is a normal (local) syslog message:
>
> Tue Dec 19 16:18:14 2000 17 saraksh.alkar.net 65536 /ftp/data/fgf092.zip b
> _ o a Squid@ ftp 0 * i
>
> This is the same in the log-server from syslog-ng:
>
> Dec 19 16:18:20 local@limonero/limonero ftpd[3065]: [ID 735137
> daemon.info] xferlog (send): 25 saraksh.alkar.net 65536
> /ftp/data/fgf092.zip b _ o a Squid@ ftp 0 * i
>
> When a program that parse those logs for statistic purpose (as webalizer)
> its fail because the logs are not in the format the webalizer expect.
>
> I save the problem pre-processing the logs whith a script that write them
> in the right format in another file and then pass it to webalizer.
>
> ¿What are the reason because the syslog-ng use another different format in
> their logs?
>
> Sorry for my english.