[syslog-ng]Syslog-ng overflow issue

[Clausing, James A (Jim), SOBUS]

	I've just noticed this problem when there is a \n embedded in the
message, too (in 1.5.10).  The stock Solaris syslog, keeps the \n and
following string in the same log entry, syslog-ng is splitting it into a new
entry and then concatenating the next message onto it.

---Jim

Solaris syslogd:
----------------
Oct 23 13:28:41 altiga1 32467 10/23/2001 13:28:43.020 SEV=4 IKE/119 RPT=859
a.b.c.d Group [employee] User [e002808]\nPHASE 1 COMPLETED

syslog-ng:
----------
Oct 23 12:29:04 altiga2 4851 10/23/2001 12:29:03.800 SEV=4 IKE/119 RPT=90
e.f.g.h Group [employee] User [e008694]
Oct 23 12:29:04 altiga2 PHASE1 COMPLETED<149>4853 10/32/2001 12:29:03.800
SEV=5 IKE/25 RPT=262 e.f.g.h Group [employee] User [e008694] Received remote
Proxy Host data in ID Payload: Address 192.168.0.191, Protocol 0, Port 0

-----Original Message-----
From: todd glassey [mailto:todd.glassey@worldnet.att.net]
Sent: Monday, October 15, 2001 6:42 PM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]Syslog-ng overflow issue


Or replicate the previous header and open a new line for this message
content - which seems like it would be a whole lot more useful...

T.
----- Original Message -----
From: "Mike Kelland" <MKelland@jetnet.ca>
To: <syslog-ng@lists.balabit.hu>
Sent: Monday, October 15, 2001 1:11 PM
Subject: [syslog-ng]Syslog-ng overflow issue


> I'm having a problem where if a syslog message is sent to syslog-ng which
> exceeds a certain length, the piece of the message which was truncated off
> the end is appended to the beginning of the next message sent.  Is there a
> way to cause syslog-ng to instead simply loose this truncated piece?
>
> Thanks,
> Mike Kelland
>
>
>  <<...OLE_Obj...>>
> Michael Kelland
> Internetworking Applications Engineer
> 333 Preston Street, 3rd Floor,
> Ottawa, Ontario. K1S 5N4
> Ph. (613) 237-5995, ext 248
> Fax(613) 237-9002
> www.JETNET.ca
> mkelland@JETNET.ca
>
> This communication contains confidential information intended solely for
the
> use of the individual/s and/or entity or entities to whom it was intended
to
> be addressed. If you are not the intended recipient, be aware that any
> disclosure, copying, distribution or use of the contents of this
> transmission is prohibited.  If you have received this communication in
> error, please contact the sender immediately, delete the communication
from
> your system and do not disclose its contents to any third party or use its
> contents.  Any opinions expressed are soley those of the author and do not
> necessariy represent those of JETNET Internetworking Services Inc. unless
> otherwise specifically stated.
>
>
>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng