[syslog-ng] [Bug 265] New: syslog-ng does not output the $PID of the process, even when forced

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Thu Dec 5 19:56:04 CET 2013


https://bugzilla.balabit.com/show_bug.cgi?id=265

           Summary: syslog-ng does not output the $PID of the process, even
                    when forced
           Product: syslog-ng
           Version: 3.4.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: support at sikkerhed.org
Type of the Report: ---
   Estimated Hours: 0.0


I'm researching syslog-ng, in order to set it up on all my machines, and have them log to a central server on the network.

Things are going great, except I can't seem to force syslog-ng to report the $PID of the program that logs, so sometimes I get lines that have missing $PIDS:

(anonymized, but based on real log line)

  2013-12-05T19:40:44.388099+01:00 web15.example.org pop3d: Connection, ip=[::ffff:x.y.z.w]

Whereas I was able to change pureftpd to log with pid:

  2013-12-05T19:40:44.639127+01:00 web15.example.org pure-ftpd[872804]: (?@x.y.z.w) [INFO] New connection from x.y.z.w

Unfortunately, courier-imap does not have such a logging option.

I thought that using $PID in the output template would force syslog-ng to log the PID of the reporting process, but this does not seem to be the case.

Is it really true that there is no way to force syslog-ng to report the PID? I know that rsyslog has this feature, but I would much rather use syslog-ng :)


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list