[syslog-ng] Syslog-NG, log4j, tabs, whitespace, indent

[Balazs Scheidler]

On Wed, 2008-12-10 at 15:30 -0600, John Skopis wrote:
> Hello,
> I believe that the log4j SyslogAppender is sending logs to syslog-ng that begin with a '\t' (or four spaces).
> 
> The leading whitespace is trimmed either because it's not allowed per the syslog RFC, or for some other (hopefully) good reason.
> 
> Can I turn this behavior off?
> 
> an example would be a message:
> Dec 10 16:17:52 testbox at java.lang.Thread.run(Thread.java:619)
> which should be
> Dec 10 16:17:52 testbox \tat java.lang.Thread.run(Thread.java:619)

I've just checked with syslog-ng OSE 2.1, and the tabs stay where they
are. It should be the same with syslog-ng OSE 2.0

Can you strace/tcpdump the exact traffic as it is received by syslog-ng?

-- 
Bazsi