[syslog-ng]Can I prevent syslog-ng from prepending logs from other servers?

William Yodlowsky wyodlows@andromeda.rutgers.edu
Tue, 19 Dec 2000 12:32:58 -0500


On Tue, Dec 19, 2000 at 05:20:41PM +0100, Victor Barahona wrote:
> On Tuesday 19 December 2000 13:25, you wrote:
> >William Yodlowsky on Mon, Dec 18, 2000 at 11:34:34PM -0500:
> >> On Mon, Dec 18, 2000 at 05:09:20PM -0600, Matt Mencel wrote:
> >
> >the main reason why you have replaced your original syslog are
> >advanced filtering capabilities .. use them :)
> 
> William, I think you missunderstand the question from Matt.

I have been misquoted  :)  Those words are not mine, but rather they
belong to Gregor Binder <gbinder@sysfive.com>


> The problem is that this is a normal (local) syslog message:
> 
> Tue Dec 19 16:18:14 2000 17 saraksh.alkar.net 65536 /ftp/data/fgf092.zip b 
> _ o a Squid@ ftp 0 * i
> 
> This is the same in the log-server from syslog-ng:
> 
> Dec 19 16:18:20 local@limonero/limonero ftpd[3065]: [ID 735137 
> daemon.info] xferlog (send): 25 saraksh.alkar.net 65536 
> /ftp/data/fgf092.zip b _ o a Squid@ ftp 0 * i
> 
> When a program that parse those logs for statistic purpose (as webalizer) 
> its fail because the logs are not in the format the webalizer expect.
> 
> I save the problem pre-processing the logs whith a script that write them 
> in the right format in another file and then pass it to webalizer.
> 
> ¿What are the reason because the syslog-ng use another different format in 
> their logs?
> 
> Sorry for my english.