[syslog-ng] Extra characters at beginning of line

Florian Hines lists at syn-recon.net
Wed Jan 7 21:51:00 CET 2009

chris packham wrote:
> "<134>" is the encoding of the facility severity as per RFC 3164 http://www.ietf.org/rfc/rfc3164.txt (section 4.1.1).
> Hopefully someone else on the list can point out why its appearing in your log messages. Can you post your syslog-ng version (syslog-ng -V) and relevant parts of your syslog-ng.conf file.

Ahh, in that case my problem is with Splunk (its not stripping or using
the facility and just using the whole line as raw input for indexing).

Thanks for the help!

More information about the syslog-ng mailing list