[syslog-ng]Multi-line log entries

[Dave Johnson]

* Do you sepecify a message templates in logging?
* Have you tried setting the following in options:
        keep_hostname(yes);
        use_dns(no);
        long_hostnames(off);
* That looks like a Solaris machine, do you have it setup as a proper sourc=
e?
IE:
source local { sun-streams("/dev/log" door("/etc/.syslog_door"));};

On 5/3/05, yesenia_rincon@bankone.com <yesenia_rincon@bankone.com> wrote:
> Are you aware of any issues where on the local host the multi-line messag=
es
> include the hostname and syslog-ng does not include the hostname, is ther=
e
> a configuration option to resolve this problem ?
>=20
> Apr 23 00:00:05 img4s012.svr.bankone.net/img4s012.svr.bankone.net scsi: [=
ID
> 107833 kern.warning] WARNING: /pci@8,700000/pci@2/
> lpfc@5/sd@0,de (sd98):
> Apr 23 00:00:05    img4s012.svr.bankone.net/img4s012.svr.bankone.net
> corrupt label - wrong magic number
>=20
> This is how the event shows in syslog-ng:
>=20
> Apr 23 00:00:05 img4s012.svr.bankone.net/img4s012.svr.bankone.net scsi: [=
ID
> 107833 kern.warning] WARNING: /pci@8,700000/pci@2/
> lpfc@5/sd@0,de (sd98):
> Apr 23 00:00:05      corrupt label - wrong magic number
>=20
> Regards,
> Jessie
>=20
> This transmission may contain information that is privileged, confidentia=
l and/or exempt from disclosure under applicable law. If you are not the in=
tended recipient, you are hereby notified that any disclosure, copying, dis=
tribution, or use of the information contained herein (including any relian=
ce thereon) is STRICTLY PROHIBITED. If you received this transmission in er=
ror, please immediately contact the sender and destroy the material in its =
entirety, whether in electronic or hard copy format. Thank you.
>=20
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>=20
>