[syslog-ng] Syslog-ng Agent for Windows 3.1 " Customizing file messages"
pzolee at balabit.hu
Wed Apr 28 09:26:09 CEST 2010
John MacDonald wrote:
> I am trying to follow the following procedure:
> Procedure 3.18. Customizing file messages
> 1. Start the configuration interface of the syslog-ng Agent for Windows application.
> 2. Select syslog-ng Agent Settings, right-click on File Sources and select Properties.
> 3. Type the message format into the Message Template field. You can use date- and file-related macros (see
> Section 3.6.2, "Macros available in the syslog-ng Agent" (p. 26) for a list of macros). The message customized
> here is included in the server-specific templates using the MESSAGE macro.
> By default, the following is sent about file messages: $FILE_NAME: $FILE_MESSAGE.
> 4. Select Apply, then OK. To activate the changes, restart the syslog-ng Agent service.
> My issue is on File Sources>Properties there isn't a Message Template field. Can you
> tell me if there is another procedure for this?
You are right, it's a bug in the documentation. We changed it in v3.1,
the messages templates are on another tab:
Select syslog-ng Agent Settings > Destinations > Network, and
double-click on IPv4. Select your logserver,
and click Edit.
Select the Messages tab
To change the format of messages received from eventlog sources, type
the message format you want to use
into the Event Message Format > Message Template field.
To change the format of messages received from file sources, type the
message format you want to use into
the File Message Format > Message Template field.
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
More information about the syslog-ng