[syslog-ng] [Bug 179] SDATA from Loggen Not Recorded

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=179


Gergely Nagy <algernon at balabit.hu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |algernon at balabit.hu




--- Comment #1 from Gergely Nagy <algernon at balabit.hu>  2012-05-09 11:36:42 ---
(In reply to comment #0)
> Created an attachment (id=60)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=60) [details]
> Syslog-ng conf
> 
> I have been trying to find some API to write SDATA to mongodb, but it seems that syslog-ng is not parsing the sdata correctly or loggen is not being called
> correctly.

SDATA is only parsed when using the new syslog protocol, as opposed to the legacy protocol. The tcp() source parses messages according to the legacy format by
default, syslog() source parses according to the new protocol.

You should either change tcp() to syslog(), or add flags(syslog-protocol) to the tcp() source you expect SDATA on. The two protocols should not be mixed,
however, so make sure that only the proper format is sent.

Hope this helps!


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.