[syslog-ng] setting facility/level of source log messages ?

Balazs Scheidler bazsi at balabit.hu
Mon Mar 2 15:25:53 CET 2009


On Mon, 2009-03-02 at 15:11 +0100, Xavier Lapie wrote:
> Hi,
> 
> I often meet the case where I need to centralize some purely
> applicative log messages (ie they don't even have a PRI header).
> So syslog-ng sets a default facility and severity for these messages,
> like kern facility and emergency severity for a source file with a
> "no-parse" option.
> 
> Is there a clean way to change these default values by modifying
> the configuration file ? (and not using a source program() nor a
> tail | logger trick).
> 
> I've already written a quick and dirty patch for my needs, but it would
> be great to have a native way of doing the same thing (I may have missed
> something in the documentation).
> 

In 3.0 OSE there are options to set these for file sources, but no options to set 
them for no-parse sources. I'll take care about this when I get there, but please file
a bugzilla ticket.

Alternatively you could submit your patches, that could potentially solve this 
problem faster.

-- 
Bazsi



More information about the syslog-ng mailing list