[syslog-ng] 1.3.17 and $PROGRAM

[Chris Scheller]

here in the last 3 lines of the (NULL) file...

Feb 21 15:53:56 floyd/floyd sshd[12597]: Accepted password for red from
209.144.112.109 port 1050
Feb 21 15:54:01 floyd/floyd su[12608]: + pts/2 red-root
Feb 21 16:00:07 floyd/floyd ntpdate[12633]: adjust time server
209.144.112.3 offset 0.094803 sec






Chris Scheller
System/Network Administration
Network One Internet, inc.
http://www.networkone.net/
1.888.GOT-NET1

On Mon, 21 Feb 2000, Balazs Scheidler wrote:

> On Mon, Feb 21, 2000 at 11:34:25AM -0800, Chris Scheller wrote:
> > There is no specific message which triggers it. I was just going through
> > the last few days of logs and it appears that any syslog message coming
> > remotely doesn't get processed via the $PROGRAM
> > macro. example; pppd,named,chat,ntpdate,sshd all get logged into the file
> > (NULL). However messages coming from remote host get the $FACILITY macro
> > applied correctly. Do you want to see my logs? My conf? What else would
> > you like to see so i can be more helpful?
> 
> a single message which was written to the file (NULL) would help. I tried
> the same locally, but $PROGRAM was expanded correctly.
> 
> -- 
> Bazsi
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
>      url: http://www.balabit.hu/pgpkey.txt
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>