[syslog-ng]Corrupted messages in log

[Dmitri Smirnov]

Thanks, Loic,

some important parts of config, skipping filters:

#
source local { sun-streams("/dev/log"); internal(); udp(); };

options {
        use_fqdn(yes);
        use_dns(yes);
        dns_cache(yes);
        keep_hostname(yes);
        chain_hostnames(no);
        bad_hostname("^5.*");
        sync(0);
        stats(0);
        log_fifo_size(1024);
        log_msg_size(2048);
        use_time_recvd(yes);
        dns_cache_expire(36000);
        dns_cache_expire_failed(3600);
        dns_cache_size(10000);

};=20


destination syslog { file("/var/log/syslog" owner(root) group(other) =
perm(0644) template("$DATE $FULLHOST $FACILITY.$PRIORITY $MESSAGE\n") =
template_escape(no)); };

log { source(local); filter(filter1_not); filter(filter2_not); =
filter(filter3_not); filter(filter4_not); filter(filter5_not); =
destination(syslog); };

Dmitri

-----Original Message-----
From: Lo=EFc Minier [mailto:lool+syslog@via.ecp.fr]=20
Sent: Wednesday, September 22, 2004 3:19 AM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]Corrupted messages in log

Dmitri Smirnov <Dmitri.Smirnov@fusepoint.com> - Tue, Sep 21, 2004:

> syslog-ng 1.6.3, Solaris 8 with latest patches.
> Destination to file using templates, network and local sources,=20
> multiple filters.
> Started to receive multiple syslog messages from different hosts=20
> concatenated in one big syslog message ..

 Post your configuration, did you use unix-stream or unix-dgram in your  =
sources?  or sun-streams?

--
Lo=EFc Minier <lool@dooz.org>
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu =
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html