[syslog-ng] setting facility/level of source log messages ?
Balazs Scheidler
bazsi at balabit.hu
Mon Mar 2 15:25:53 CET 2009
On Mon, 2009-03-02 at 15:11 +0100, Xavier Lapie wrote:
> Hi,
>
> I often meet the case where I need to centralize some purely
> applicative log messages (ie they don't even have a PRI header).
> So syslog-ng sets a default facility and severity for these messages,
> like kern facility and emergency severity for a source file with a
> "no-parse" option.
>
> Is there a clean way to change these default values by modifying
> the configuration file ? (and not using a source program() nor a
> tail | logger trick).
>
> I've already written a quick and dirty patch for my needs, but it would
> be great to have a native way of doing the same thing (I may have missed
> something in the documentation).
>
In 3.0 OSE there are options to set these for file sources, but no options to set
them for no-parse sources. I'll take care about this when I get there, but please file
a bugzilla ticket.
Alternatively you could submit your patches, that could potentially solve this
problem faster.
--
Bazsi
More information about the syslog-ng
mailing list