[syslog-ng] Syslog-ng open source version -- program_override option

Jain, Vaibhav (GE Healthcare) Vaibhav.Jain at ge.com
Wed Aug 12 10:54:16 CEST 2009

Hi Bazsi,

I want to send all the log messages from client machine to server mahine
in the same file. I have installed the syslog-ng client on client
machine and syslog-ng server on server. I am passing the source file
name with the log message using FILE_NAME and template. And I am
receiveing the log message on server side. And using match macro I am
pushing log messages in the file name present in the log message. But
now on the server side the log message is actual mesg + file name.so I
want to delete the file name from the received mesg. So that the
received mesg would be same as original messsge. The use of file name in
the message is only to detemine the source file name. So that I can push
the log in the same file in the server side. ( basically same file name
replica on cline side and server side )

Example => 

Clinet = org mesg + file name
Server side = extract / mactch the file name from the received mesg and
push the original mesg in that log file with out file name in the mesg

Let me know how to remove the filename string from the received mesg so
that I can get the actual mesg?

- V 

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Balazs
Sent: Wednesday, August 12, 2009 1:50 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Syslog-ng open source version --
program_override option

On Wed, 2009-08-12 at 13:15 +0530, Jain, Vaibhav (GE Healthcare) wrote:
> Hi Bazsi,
> Thanks for your quick response.
> In this case how to remove the $FILE_NAME value from the received 
> message on the syslog-ng server? Because now the received message = 
> Original mesg + File Name.

I don't know what you want to accomplish? At first you wanted to include
the filename information and now you want to remove it? Why? Can you
post examples?


Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html

More information about the syslog-ng mailing list