[syslog-ng] Writing a null character at the end of TCP payload

[Nicolas Fédou]

Hi,
Both ways answer my needs.
I prefer to let a commiter/contributor choose the beter solution for the
future of Syslog-ng.

By the way, I shall ask a feature un the bug tracking, or you already have
one ?

Regards, Nicolas.
Le 11 août 2014 09:01, "Gergely Nagy" <algernon at balabit.hu> a écrit :

> Balazs Scheidler <bazsi77 at gmail.com> writes:
>
> > I would prefer the creation of $(format-gelf) which would solve both the
> > NUL issue and makes it easier for someone else to create GELF output.
>
> FWIW, since there is no GELF C library out there, I started hacking on
> one (which would also support chunking, and would provide an API we can
> plug into LogWriter, so we won't have to make it a
> LogThreadedDestDriver). It will take a while to finish it, because I'm
> playing with getting the API right.
>
> > Or alternatively, add an option to $(format-json) to add a suffix (and
> > perhaps a prefix) in front of and after the resulting string. That would
> be
> > useful for other purposes as well, and then $(format-gelf) could be
> > implemented by my latest patches that enable the definition of template
> > functions within the configuration file.
> >
> > E.g.
> >
> > template-function "format-gelf" "$(format-json --suffix "\x0"
> <format-json
> > arguments to produce gelf>)"
> >
> > destination d_graylog {
> >     network("1.2.3.4" transport(tcp) template("$(format-gelf)"); };
> > };
>
> How about $(char 0) as a template function? That can be reused outside
> of format-json.
>
> --
> |8]
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140814/aa022176/attachment.htm