[syslog-ng] $EVENT_SOURCE and $USERNAME are blank

Gustavo Soares gustavosoares at gmail.com
Tue Jul 31 19:51:25 CEST 2007


Hi all!

When I try to capture the EVENT_SOURCE or USERNAME variables within the
template clause, these fields are logged blank in the log file.

here is an excerpt of my configuration file..

destination local6 {
file("/opt/logserver/log4j/$HOST/$YEAR/$MONTH/received.$DAY$MONTH$YEAR.log"
                     template("$DATE User:$USERNAME $EVENT_SOURCE
$MESSAGE\n") template_escape(yes)
                     owner(watcher) group(other) create_dirs(yes)); };


anybody knows why this occurs?

Cheers,
Gustavo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070731/497fd009/attachment.htm 


More information about the syslog-ng mailing list