[syslog-ng] Extra characters at beginning of line

[Florian Hines]

chris packham wrote:
> "<134>" is the encoding of the facility severity as per RFC 3164 http://www.ietf.org/rfc/rfc3164.txt (section 4.1.1).
> 
> Hopefully someone else on the list can point out why its appearing in your log messages. Can you post your syslog-ng version (syslog-ng -V) and relevant parts of your syslog-ng.conf file.
> 

Ahh, in that case my problem is with Splunk (its not stripping or using
the facility and just using the whole line as raw input for indexing).

Thanks for the help!
Florian