[syslog-ng]Getting Logs in Triplicate

Nate Campi syslog-ng@lists.balabit.hu
Thu, 20 Jan 2005 09:47:57 -0800

On Thu, Jan 20, 2005 at 06:01:20AM -0800, Rhugga wrote:
> I am assuming syslog-ng is adding this field since the copy of the log
> entry in the local /var/adm/messages file does not contain this.

Solaris is adding that, and I don't think you can completely remove this
but you can modify it's behavior (you can turn off the message ID, I
know that for sure).

See https://lists.balabit.hu/pipermail/syslog-ng/2004-August/006329.html

"Prosperity is the surest breeder of insolence I know." - Samuel Clemens