[syslog-ng]Problems in Solaris 2.7 with truncated message
Hernan Cortez
syslog-ng@lists.balabit.hu
Wed, 20 Oct 2004 17:49:34 -0300
Hi Angelita,
Yes, indeed the "\n" is a test to break the sentence. If you see the second
template the $MSG between "-" appears truncated also.
Any ideas?
I don't think is a configuratiion problem.
The binaries are from www.sunfreeware.com, may be i need to compile
instead...
HC
Angelita Soares de
Camargos To: syslog-ng@lists.balabit.hu
<anghelasc@gmail.com> cc:
Sent by: Subject: Re: [syslog-ng]Problems in Solaris 2.7 with truncated message
syslog-ng-admin@lists
.balabit.hu
20-10-2004 17:42
Please respond to
syslog-ng
Hernan,
did you try erase the first "\n" in this sentence?
....
'$PROGRAM', \n '$MESSAGE' );\n")
....
I use a template to insert into mysql and it work fine.
******
destination d_mysql { pipe("/tmp/mysql.pipe"
template("INSERT INTO logs (host, facility, priority, level, tag,
date,time,program, msg)
VALUES ( '$HOST', '$FACILITY', '$PRIORITY',
'$LEVEL','$TAG','$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC','$PROGRAM',
'$MSG' );\n") template-escape(yes));
};
******
On Wed, 20 Oct 2004 14:26:10 -0300, Hernan Cortez <hcortez@adexus.cl>
wrote:
>
> Opss. Wrong subject. excuse me.
>
> Hi, I'm trying to install syslog-ng 1.6.4 in Solaris 2.7.
> The binaries install and works OK, but the messages appear to be
truncated.
> By example the following sentece:
>
> destination d_mysql {
> file("/var/log/dblog/fulllog.$YEAR.$MONTH.$DAY.$HOUR.$MIN.$SEC"
> template("INSERT INTO logs (host, facility, priority, level, tag,
> date, time, program, msg)
> VALUES ( '$HOST', '$FACILITY',
> '$PRIORITY','$LEVEL', '$TAG','$YEAR-$MONTH-$DAY','$HOUR:$MIN:$SEC',
> '$PROGRAM', \n '$MESSAGE' );\n")
> owner(root) group(root) perm(0600)
> dir_perm(0700) create_dirs(yes)
> template-escape(yes));
> };
>
> In the log it appears without the ");\n" (last 3 characters), so the
> insert in the mysql doesn't work. I do the test in with the following
> destination:
>
> template("-$MSG--")
>
> In this case the last character "-" doesn't appear.
>
> Any idea?
> Does syslog have a buffer problem?
>
> Thanks in advance,
>
> HC
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>
_______________________________________________
syslog-ng maillist - syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html