[syslog-ng] patternize and IPv6 hosts

Valentijn Sessink valentyn at blub.net
Thu Feb 24 12:07:26 CET 2011


Hi,

Just a small remark. If you run pdbtool with "patternize" on a log file
with logs from an IPv6 host, pdbtool thinks that everything after the
first ":" is the log message. For example, the log message:

Feb 24 11:39:26 2a01:4f8:8a0:5141::3c2 named[31090]: lame server
resolving ....

... will be patternized as if the logging host were "2a01" and if the
pattern should be:
<pattern>4f8:8a0:5141::3c2 named[31090]: lame server resolving
....</pattern>

I searched around in the patternize code, but could not find the
particular code where the host got cut off. However, for someone a bit
at home in this code, I think the fix should be trivial.

Best regards,

Valentijn


More information about the syslog-ng mailing list