[syslog-ng] syslog message without timestamp

[Fekete, Róbert]

Hi,

The  easiest way to drop the timestamp is on the syslog-ng server side,
where you write the message into a file. There you can use a template,
something like the one below. But why do you want to send a message without
a timestamp?

destination d_file {
    file ("/var/log/messages" template("${MSG}\n") );};



On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <icsuti at zalaszam.hu> wrote:

> Hi All!
>
> I would like send UDP message to the syslog server without timestamp.
>
> I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.
>
> The new "RFC 5424 (also called the IETF-syslog protocol): see Section
> 2.8.2,
> IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.
>
> I sended this "<110>1 - hostname procname procid - - Message"
>
> The syslog-ng server logged this:
>
> "Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"
>
> Question:
> What is wrong in my message string?
> The syslog-ng server why do not decode "1" after ">" as version?
> Can i send old syslog message (RFC3164) without timestamp?
>
> Best Regards
> Istvan Csuti
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160921/6e825e4d/attachment.htm