[syslog-ng]syslog-ng long_hostsname
Dennis Kruyt
d.kruyt@zx.nl
Wed, 28 Mar 2001 10:47:30 +0200
This is a multi-part message in MIME format.
------=_NextPart_000_0247_01C0B774.7CEA8ED0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi,
I'm running syslog-ng server with a SSL tunnel to the syslog-ng client's
I'm sorting the log files to the following dir
destination extern { file( "/var/logs/$HOST/$DAY/$FACILITY.log"); };
That function works fine but in the log file there is the following =
line:
Mar 28 03:01:26 src@XXX/ZZZZ.bos.nl proftpd[3808]: XXXX.bos.nl =
(ZZZZ.bos.nl[195.XX.XX.XX]) - FTP session closed.
But i want the same line as with syslog
Mar 28 03:01:26 XXX proftpd[3808]: XXXX.bos.nl =
(ZZZZ.bos.nl[195.XX.XX.XX]) - FTP session closed.
So that the log analyzer can do there work, i know that i can put out =
that function with long_hostnames(off) but then is the sorting function =
for the directory's also gone
is there a solution for this.
Dennis Kruyt,
ZXFactory BV
Telefoonweg 44b
6712 GD EDE
The Netherlands
T +31 138 693 111
F +31 139 693 042
I www.zxfactory.nl
------=_NextPart_000_0247_01C0B774.7CEA8ED0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.3018.900" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi,</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>I'm running syslog-ng server with a SSL =
tunnel to=20
the syslog-ng client's</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>I'm sorting the log files to the =
following=20
dir</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>destination extern { file(=20
"/var/logs/$HOST/$DAY/$FACILITY.log"); };</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>That function works fine but in the log =
file there=20
is the following line:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>Mar 28 03:01:26 <A=20
href=3D"mailto:src@XXX/ZZZZ.bos.nl">src@XXX/ZZZZ.bos.nl</A> =
proftpd[3808]:=20
XXXX.bos.nl (ZZZZ.bos.nl[195.XX.XX.XX]) - FTP session =
closed.<BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>But i want the same line as with=20
syslog</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2><FONT face=3DArial size=3D2>Mar 28 =
03:01:26 <A=20
href=3D"mailto:src@XXX/ZZZZ.bos.nl">XXX</A> proftpd[3808]: XXXX.bos.nl=20
(ZZZZ.bos.nl[195.XX.XX.XX]) - FTP session closed.</FONT></FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>So that the log analyzer can do there =
work, i know=20
that i can put out that function with long_hostnames(off) but then is =
the=20
sorting function for the directory's also gone</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>is there a solution for =
this.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>Dennis Kruyt,</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT size=3D2>ZXFactory BV<BR>Telefoonweg 44b<BR>6712 GD =
EDE<BR>The=20
Netherlands<BR>T +31 138 693 111<BR>F +31 139 693 042<BR>I <A=20
href=3D"http://www.zxfactory.nl">www.zxfactory.nl</A><BR></FONT></DIV></F=
ONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><BR> </DIV></FONT></BODY></HTML>
------=_NextPart_000_0247_01C0B774.7CEA8ED0--