[syslog-ng]Issue with syslog-ng and process-names with spaces

Nate Campi syslog-ng@lists.balabit.hu
Sun, 16 May 2004 22:39:08 -0700

On Mon, May 17, 2004 at 05:14:49PM +1200, Jason Haar wrote:
> I don't know if this is a bug with syslog-ng-1.6.4 or NTsyslog (which
> generated the syslog record), but we have a problem with records generated
> by some NT applications showing up "corrupted" within syslog-ng. 
> Namely it thinks the hostname is the process name.

This is what bad_hostname() is for.

 Usage: new global option named bad_hostname(), expects a regular
 expression which should match all bad hostnames:

 options { bad_hostname("^ctld$"); };

Just for the record, there's no way for syslog-ng to know the difference
in advance between a hostname and a fsck'd up process name with a space
in it. You have to tell syslog-ng about it.

If you tell them, they never listen. If they listen, they never
learn. If they learn, they never remember. If they remember, they
never obey.