[syslog-ng] Syslog-ng OSE multiline messages support

[Balazs Scheidler]

----- Original message -----
> Hello,
> 
> I have one question, does syslog-ng OSE support multiline parsing logs? 
> i have one applications that send multiline messages and syslog-ng save
> the log of the first line only.
> 
> Thanks for your support in adavnce,
> 

syslog-ng core is multiline aware, however a transport is needed that supports multiline messages.

such a transport is udp(), which has other issues. syslog() with either udp, tcp or tls supports multiline messages.

similarly unix-dgram should work for locally generated multiline messages.

the only missing thing is the ability to read local files and recognize multiline barriers, but Algernon is working on solving this.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20121025/529ec301/attachment.htm