[syslog-ng] Unable to set PRIORITY and LEVEL in rewrite

[Balazs Scheidler]

On Mon, 2009-06-29 at 16:22 +0200, Siem Korteweg wrote:
> Hi,
> 
> with the central logging of syslog in place, I moved on to the
> file /var/log/httpd/ssl_error_log to explore the syslog-ng (3.0.2-1
> OSE on CentOS 5.3) capabilities with logfiles from other applications.
> The contents of this file are rather straightforward:
> 
> [Wed Jun 24 12:14:49 2009] [warn] RSA server certificate is a CA
> certificate (BasicConstraints: CA == TRUE !?)
> [Wed Jun 24 12:14:49 2009] [error] [client 192.168.3.178] PHP Notice:
> Undefined offset:  2
> 
> I want to skip the date/time (assuming there is no delay before
> syslog-ng processes the data) and to set the PRIORITY and LEVEL
> attributes to "warning" and "err". The following config file (included
> in the main config) should do the job.

This is not currently supported. In fact the rewrite stuff only works
with name-value pairs, and not with all kinds of macros. I plan to fix
this in syslog-ng 3.1.

-- 
Bazsi