[syslog-ng] local6 doesn't seem to work...

Geller, Sandor (IT) Sandor.Geller at morganstanley.com
Wed Jun 4 15:16:58 CEST 2008


Hi,

> Ok, done that: I see now:
>
> 1f imap[11480]: seen_db: ...
> 1f imap[11480]: open: user supporttickets opened INBOX
> 1f imap[11480]: SQUAT failed to open index file
> 1f imap[11480]: SQUAT failed
> 1f imap[11480]: accepted connection
>
> So what does it tell?  The '1f' used to be the date/timestamp.

No, 1f is the facility/priority in HEX. 1f is 31 in decimal, which
is 3*8 + 7. 3 stands for the daemon facility, and 7 is the debug
priority. So these logs came from daemon.debug

You should adjust your filter.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.


More information about the syslog-ng mailing list