[syslog-ng] what's the default template of file destination?
Julien Groselle
julien.groselle at gmail.com
Fri Apr 13 13:31:50 CEST 2012
Hi,
In documentation 3.1 (page 70) ;)
By default, syslog-ng sends messages using the following template: *$ISODATE
$HOST $MSGHDR$MSG\n*.
(The* **$MSGHDR$MSG *part is written together because the *$MSGHDR *macro
includes a trailing whitespace.)
--
JG
Le 13 avril 2012 09:04, Fu Ecy <fuzhijie1985 at gmail.com> a écrit :
> Dear guys:
>
> I use syslog-ng to gather the error log of my system, but now I have a
> problem. The original log message is like this.
>
> *[2012-04-10 **18:51:30**]
> [BlenderProcessor.cpp:452:allocPhase1Request()] [WARN] :: BLENDER:
> queryparser doRewrite function error*
>
> I set the template like this.
>
> *file( "/home/admin/logs/blender.log.$S_YEAR-$S_MONTH-$S_DAY"
> create_dirs(yes) owner(admin) group(admin) perm(0755)
> template("$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC\t$FULLHOST\t$MESSAGE\n") );*
>
> Then I get the log like this.
>
> *2012-04-13 14:41:36 s061090.cm5 18:51:30] [BlenderProcessor.cpp:452:allocPhase1Request()]
> [WARN] :: BLENDER: queryparser doRewrite function error*
>
> The date of original log message has been truncated. If I don't use
> template, it will be ok. So I wonder what is the default template.
>
> Thank you very much :)
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20120413/6bb23683/attachment.htm
More information about the syslog-ng
mailing list