[syslog-ng]Normalizing syslogs from FreeBSD and Solaris machines

Ken McKittrick syslog-ng@lists.balabit.hu
Thu, 5 Aug 2004 13:00:41 -0400


Loic

That was the clue I needed. Those are called Message ID's and they were=20=

a "feature" that was added in Solaris 8. You can turn them off in=20
/kern/drv/log/conf. Only problem is that the change requires a reboot.=20=

We don't like reboots.

Thanks
Ken McKittrick

On Aug 5, 2004, at 11:59 AM, Loic Minier wrote:

> Ken McKittrick <klmac@usadatanet.net> - Thu, Aug 05, 2004:
>
>> So how can I gracefully removed the [ID xxxxxx Facility.Priority] =
from
>> the message in the Solaris log lines?
>
>  I don't recall exactly if that will completely solve your problem, =
but
>  part of the solution might be to configure the /kernel/drv/log.conf
>  file with something like:
>     name=3D"log" parent=3D"pseudo" instance=3D0 msgid=3D0;
>
>    HTH,
>
> --=20
> Lo=EFc Minier <lool@dooz.org>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>