[syslog-ng] Syslog with epilog (for windows)

Javier Terceiro correolista at gmail.com
Wed May 9 13:59:37 CEST 2007


Hello list,

I am mounting a log centralized server and for servers Windows I am
using epiloj and the collector server is a syslog-ng.
I have a problem with the data format that epiloj sends, I can`t
correctly divide it in fields (server, date, message) in syslog-ng
server.

For example
  - The original message of epilog:
     GenericLog      0       2007-05-09 12:23:42 192.*.*.* - W3 ST
172.*.*.* 80 GET / - 403 5 334 174 0 HTTP/1.1 ---

The format with that the data keep would have to be the following one:
Program <> Date <> MSGONLY (in syslog-ng format).
  - The message saved by syslog-ng:
     GenericLog      0       2007-05-09 12 <> 2007 May  9 12:23:42 <>
3:42 192.*.*.* - W3 ST 172.*.*.* 80 GET / - 403 5 334 174 0 HTTP/1.1
---

  - The message correctly:
     GenericLog <> 2007 May  9 12:23:42 <> 192.*.*.* - W3 ST 172.*.*.*
80 GET / - 403 5 334 174 0 HTTP/1.1 ---

The problem is the fields than syslog don`t understand.

Some idea of like obtaining it?
Some program for obtain log's for windows server's?

thanks.

-- 

A greeting,

Javier.


More information about the syslog-ng mailing list