[syslog-ng] syslog-ng 3.1.1 "cuts" of the first charater of the Apache error log when forwarding
filip.nollet at bayercropscience.com
filip.nollet at bayercropscience.com
Fri Apr 23 14:05:14 CEST 2010
Hi all
I have a weird problem with syslog-ng. I am setting up a syslog-ng client
on an Apache server which forward both access and error log to a central
syslog-ng server.
The access log on the source has entries like this:
10.3.154.20 - - [23/Apr/2010:13:55:25 +0200] "GET /images/userLo...
and this becomes like this on the syslog server:
servername 10.3.154.20: - - [23/Apr/2010:13:55:25 +0200] "GET /images/use
All ok with this one, but with the error log I get this on the webserver:
[Fri Apr 23 13:55:25 2010] [error] [client 10.3.154.20] File doe...
but this on the syslog server:
servername Apr 23 13:55:25 2010] [error] [client 10.3.154.20] File do...
Where is the [ character at the beginning of the timestamp gone?????
Both logs use the same type configuration; I have double checked
everything, but I have no clue why syslog-ng(?) does this...
In wireshark the receiving syslog server is receiving it like this, so it
is send like this by syslog-ng on the source server.
Any idea?
Met vriendelijke groeten / Cordialement / Freundliche Grüße / Best Regards
Filip Nollet
Bio Information System Administrator
_______________________
Bayer BioScience N.V.
Bio Information Management - A&S
Technologiepark 38
9052 Zwijnaarde
Phone: +32-9.243.04.28
Fax: +32-9.224.06.94
E-mail: filip.nollet at bayercropscience.com
________________________________________________________________________
The information contained in this e-mail is for the exclusive use of the
intended recipient(s) and may be confidential, proprietary, and/or
legally privileged. Inadvertent disclosure of this message does not
constitute a waiver of any privilege. If you receive this message in
error, please do not directly or indirectly use, print, copy, forward,
or disclose any part of this message. Please also delete this e-mail
and all copies and notify the sender. Thank you.
For alternate languages please go to http://bayerdisclaimer.bayerweb.com
________________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100423/83639e09/attachment.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 4524 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100423/83639e09/attachment.gif
More information about the syslog-ng
mailing list