[syslog-ng]"message repeated N times"

[Balazs Scheidler]

On Thu, Aug 08, 2002 at 01:33:32PM -0700, Andan Lauber wrote:
> heya,
> 	i've not seen it do it, but i've only the one host running
> syslog-ng as a central loghost, with generic syslogs reporting to it, but
> does syslog-ng deal with repeat messages like generic syslog does, in this
> fashion?
> 
> host.domain.tld message repeated 4 times
> 
> or does it just spew out the message again?

it recognizes last message repeated messages, but does not modify them. This
means that the whole 'last message' repeated line will be $MSG when written
to output (earlier the word 'last' became hostname ...)

So if you do a template output like this:

destination d_file { file("/var/log/messages" template("$DATE $HOST $MSG\n")); };

this should insert the host syslog-ng received the message from.

> 
> thanks.  (and as a side, if any know of a way to STOP generic syslog from
> doing this, i'd love to hear it.  i'm hoping the answer is "install
> syslog-ng")

dunno, install syslog-ng is certainly a solution.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1