[syslog-ng] 1.3.17 and $PROGRAM
Mon, 21 Feb 2000 16:02:01 -0800 (PST)
here in the last 3 lines of the (NULL) file...
Feb 21 15:53:56 floyd/floyd sshd: Accepted password for red from
126.96.36.199 port 1050
Feb 21 15:54:01 floyd/floyd su: + pts/2 red-root
Feb 21 16:00:07 floyd/floyd ntpdate: adjust time server
188.8.131.52 offset 0.094803 sec
Network One Internet, inc.
On Mon, 21 Feb 2000, Balazs Scheidler wrote:
> On Mon, Feb 21, 2000 at 11:34:25AM -0800, Chris Scheller wrote:
> > There is no specific message which triggers it. I was just going through
> > the last few days of logs and it appears that any syslog message coming
> > remotely doesn't get processed via the $PROGRAM
> > macro. example; pppd,named,chat,ntpdate,sshd all get logged into the file
> > (NULL). However messages coming from remote host get the $FACILITY macro
> > applied correctly. Do you want to see my logs? My conf? What else would
> > you like to see so i can be more helpful?
> a single message which was written to the file (NULL) would help. I tried
> the same locally, but $PROGRAM was expanded correctly.
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> url: http://www.balabit.hu/pgpkey.txt
> syslog-ng maillist - firstname.lastname@example.org