[syslog-ng] Remove double timestamping

Marty Sørensen buzzwork at gmail.com
Tue Jan 19 11:08:05 CET 2010


Hello ....

New user to syslog-ng but still hoping someone can help me with a small
config example

Im forwarding syslog from my syslog-ng but when it arrives it has double
timestamps/hostname:
--
Jan 19 11:02:58 cut-hostname 10.229.5.2 32176: Jan 19 11:02:57:
%SFF8472-5-THRESHOLD_VIOLATION
--

I have addet this info my config:

options {
        use_time_recvd(yes);
        keep_hostname(no);
}

also included:

destination udp_forward { udp("<my ip>"); };
template fjern { template("$MSGONLY\n"); };
destination cisco_cupe { file("/var/log/cisco_cupe" template("fjern")); };
log {
        source(s_all);
        filter(local5);
        destination(cisco_cupe);
        destination(udp_forward);
};

Cheers

Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100119/438cc79f/attachment.htm 


More information about the syslog-ng mailing list