[syslog-ng] local6 doesn't seem to work...

[Geller, Sandor (IT)]

Hi,

> Ok, done that: I see now:
>
> 1f imap[11480]: seen_db: ...
> 1f imap[11480]: open: user supporttickets opened INBOX
> 1f imap[11480]: SQUAT failed to open index file
> 1f imap[11480]: SQUAT failed
> 1f imap[11480]: accepted connection
>
> So what does it tell?  The '1f' used to be the date/timestamp.

No, 1f is the facility/priority in HEX. 1f is 31 in decimal, which
is 3*8 + 7. 3 stands for the daemon facility, and 7 is the debug
priority. So these logs came from daemon.debug

You should adjust your filter.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.