[syslog-ng] Win syslog-agent PRI

Tiago Gomes da Silva Mendo tiago-g-mendo at telecom.pt
Mon Jan 28 12:05:27 CET 2008


Hi,

I have syslog-ng-premium-edition (2.1.8) on an Debian etch and multiple linuxs sending syslog messages to this server, using diferents PRIs.
The problem is with the windows agent (2.1.4). In the windows agent I have an message format like this: "<182>$DATE $HOST $EVENT_SOURCE: $MSG", but at the server the received PRI is not 182.
At the server I get messages with the correct PRI when the syslog-ng agent is restarted:

"Jan 28 10:57:41 10.176.25.108 LogRelay: Application started", with local6 and info, but every message I send through syslog-ng agent arrives at the server with user/notice (PRI 13).

Any ideas?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080128/2f0bc9c1/attachment.htm 


More information about the syslog-ng mailing list