[syslog-ng] Fwd: Re: Question

Gergely Nagy algernon at balabit.hu
Thu Jun 2 12:41:19 CEST 2011


Copying this to the syslog-ng@ list aswell, as this might be interesting
to others aswell, and the patch should be picked up for 3.3 too.

> On 2011-06-01 17:20, Costa Farber wrote:
>> Hello.
>>
>> I use syslog-ng 3.3 beta. It was working up today perfect. Today I
>> got the following result:
>> my config
>> */source s_network {
>>     udp();
>>     tcp();
>> };
>> destination d_local_prospero {
>>     file("/var/log/messages_prospero"
>> template("$ISODATE#$HOST#$MSGONLY\n") );
>> };
>> log {
>>     source(s_network);
>>     destination(d_local_prospero);
>> };/*
>>
>> source message is
>> /*Jun  1 17:50:11 ubnct lighttpd-1.5[24730]: DEBUG
>> wix.c:send_wixfs_file:345 will send file:
>> /var/www/static.wix.com/media/3d/44/3d4433_34a5623f12940907668b5ee9b72d23a3.jpg_600
>> <http://static.wix.com/media/3d/44/3d4433_34a5623f12940907668b5ee9b72d23a3.jpg_600>*/
>>
>> result is
>> /*2011-06-01T17:50:03+03:00#ubnct# 1 17:50:11 ubnct
>> lighttpd-1.5[24730]: DEBUG wix.c:send_wixfs_file:345 will send file:
>> /var/www/static.wix.com/media/3d/44/3d4433_34a5623f12940907668b5ee9b72d23a3.jpg_600
>> <http://static.wix.com/media/3d/44/3d4433_34a5623f12940907668b5ee9b72d23a3.jpg_600>*/
>>
>> It seems like parser has a bug and can not pars one digit day (it
>> has 2 spaces between month and day).
>> I need help to clear is it bug or any ather problem.

This is a known problem, but for some reason the fix did not make it
into 3.3 yet.

Attached is a patch that fixes the problem.

-- 
|8]

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fixed-BSD-timestamp-parsing-when-the-day-is-padded-w.patch
Type: text/x-diff
Size: 0 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20110602/c6a2f789/attachment.patch 


More information about the syslog-ng mailing list