[syslog-ng] ArcSight Server As Destination?
erempel at uvic.ca
Thu May 17 17:38:31 CEST 2007
Balazs Scheidler wrote:
> Syslog-ng forwards messages in the same
> format as it receives it, it does not prepend headers, only replaces
> values if it is configured to do so.
Really? My experience is one where syslong-ng receives a syslog message that does NOT
contain a timestamp, and syslog-ng forwards it with a timestamp because the receiver
portion of syslog-ng has added a timestamp.
Am I remembering this incorrectly or confusing this with some custom template?
Evan Rempel erempel at uvic.ca
Senior Programmer Analyst 250.721.7691
University of Victoria
More information about the syslog-ng