[syslog-ng] Rewriting log messages

Balazs Scheidler bazsi at balabit.hu
Tue Dec 5 18:44:56 CET 2006


On Tue, 2006-12-05 at 10:18 -0500, John Morrissey wrote:
> We've been using the syslog-ng-anon patch[1] to rewrite log traffic (mainly
> to remove the redundant integer timestamp logged by qmail-pop3d via
> splogger(8)).
> 
> We're looking at the upcoming syslog-ng 2.0 upgrade that's coming with the
> next Debian release (etch) and haven't been able to find an equivalent.
> I saw a request or two[2] for a feature like this, but don't see it in the
> latest syslog-ng source or docs.
> 
> Is a feature like this planned, or is there another way I can go about
> rewriting log traffic?

This topic comes up every now and then, but it did not hit the threshold
that'd trigger me to actually implement it. That's the current state of
affairs. I received two triggers now (one for rewriting facilities, one
for stripping IP information), so it moved a bit higher on the priority
list.

-- 
Bazsi



More information about the syslog-ng mailing list