[syslog-ng] How are messages exactly logged?

[Dian HiWi]

Hi all!
Does syslog-ng remove the facilities and severities <PRI> part, after
filtering or not?
I couldn't find such information in the Internet, and  I was wondered, when
I read my logged messages:

May 31 06:21:38 xxx syslogd 1.4.1#14: restart.
May 31 17:43:42 xxx gconfd (root-19666): starting (version 2.6.1), pid 19666
user 'root'
May 31 17:43:42 xxx gconfd (root-19666): Resolved address
"xml:readonly:/etc/gconf/gconf.xml.mandatory" to a read-only config source
at position 0
May 31 17:43:42 xxx gconfd (root-19666): Resolved address
"xml:readwrite:/root/.gconf" to a writable config source at position 1
May 31 17:43:42 xxx gconfd (root-19666): Resolved address
"xml:readonly:/etc/gconf/gconf.xml.defaults" to a read-only config source at
position 2
May 31 17:44:12 xxx gconfd (root-19666): GConf server is not in use,
shutting down.
May 31 18:01:27 xxx gconfd (root-26179): starting (version 2.6.1), pid 26179
user 'root'
May 31 18:01:56 xxx gconfd (root-26179): Exiting

I do not see the <PRI> part. But the message is logged in a dir named ' info
', which means, a severit type i being recognized.
(xxx is for the IP address)

Any ideas?


                  Cheers
                        Dian

 -------------------------------------------------------------
 Windows 95/NT - 32 bit extensions and a graphical shell
   for a 16 bit patch
       to an 8 bit operating system originally coded
          for a 4 bit microprocessor,
             written by a 2 bit company
                that can't stand 1 bit of competition.

----- Original Message ----- 
From: "Bill Nash" <billn@billn.net>
To: <syslog-ng@lists.balabit.hu>
Sent: Saturday, May 29, 2004 3:03 AM
Subject: Re: [syslog-ng]Cisco Devices


>
> A cisco config as simple as:
> logging trap debugging
> logging source-interface Ethernet0/1
> logging 192.168.100.100
>
> That last entry specifies the target syslog collector. The rest should get
> you on your way.
>
> - billn
>
>
> On Fri, 28 May 2004, Evan Himmel wrote:
>
> > I am trying to log debugging messages from 3 Cisco 7206 VXR's.  Anyone
have any suggestions on how to do this?
> >
> > Evan
>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>