[syslog-ng]Normalizing syslogs from FreeBSD and Solaris machines
Ken McKittrick
syslog-ng@lists.balabit.hu
Thu, 5 Aug 2004 13:00:41 -0400
Loic
That was the clue I needed. Those are called Message ID's and they were=20=
a "feature" that was added in Solaris 8. You can turn them off in=20
/kern/drv/log/conf. Only problem is that the change requires a reboot.=20=
We don't like reboots.
Thanks
Ken McKittrick
On Aug 5, 2004, at 11:59 AM, Loic Minier wrote:
> Ken McKittrick <klmac@usadatanet.net> - Thu, Aug 05, 2004:
>
>> So how can I gracefully removed the [ID xxxxxx Facility.Priority] =
from
>> the message in the Solaris log lines?
>
> I don't recall exactly if that will completely solve your problem, =
but
> part of the solution might be to configure the /kernel/drv/log.conf
> file with something like:
> name=3D"log" parent=3D"pseudo" instance=3D0 msgid=3D0;
>
> HTH,
>
> --=20
> Lo=EFc Minier <lool@dooz.org>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>