[syslog-ng] syslog message without timestamp

Fekete, Róbert robert.fekete at balabit.com
Thu Sep 22 10:55:06 CEST 2016


I see. Then the easiest is probably to not bother with the timestamp on the
sender (arduino) side, and set the keep-timestamp(no) option on the server
side.

On Wed, Sep 21, 2016 at 9:41 PM, Csuti Istvan <icsuti at zalaszam.hu> wrote:

> Hi!
>
> I write a program on arduino embended system.
> This device do not have Real Time Clock.
> I sended UDP syslog datagram from this device.
>
>
> 2016.09.21. 20:19 keltezéssel, Fekete, Róbert írta:
>
> Hi,
>
> The  easiest way to drop the timestamp is on the syslog-ng server side,
> where you write the message into a file. There you can use a template,
> something like the one below. But why do you want to send a message without
> a timestamp?
>
> destination d_file {
>     file ("/var/log/messages" template("${MSG}\n") );};
>
>
>
> On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <icsuti at zalaszam.hu> <icsuti at zalaszam.hu> wrote:
>
>
> Hi All!
>
> I would like send UDP message to the syslog server without timestamp.
>
> I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.
>
> The new "RFC 5424 (also called the IETF-syslog protocol): see Section
> 2.8.2,
> IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.
>
> I sended this "<110>1 - hostname procname procid - - Message"
>
> The syslog-ng server logged this:
>
> "Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"
>
> Question:
> What is wrong in my message string?
> The syslog-ng server why do not decode "1" after ">" as version?
> Can i send old syslog message (RFC3164) without timestamp?
>
> Best Regards
> Istvan Csuti
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
>
> Hi,
>
> The  easiest way to drop the timestamp is on the syslog-ng server side,
> where you write the message into a file. There you can use a template,
> something like the one below. But why do you want to send a message without
> a timestamp?
>
> destination d_file {
>     file ("/var/log/messages" template("${MSG}\n") );};
>
>
>
> On Wed, Sep 21, 2016 at 7:41 PM, Csuti Istvan <icsuti at zalaszam.hu> wrote:
>
>> Hi All!
>>
>> I would like send UDP message to the syslog server without timestamp.
>>
>> I readed RFC3164 and RFC5424 and syslog-ng-ose-guide-admin.pdf.
>>
>> The new "RFC 5424 (also called the IETF-syslog protocol): see Section
>> 2.8.2,
>> IETF-syslog messages (p. 13)" support NIL values "-" in HEADER.
>>
>> I sended this "<110>1 - hostname procname procid - - Message"
>>
>> The syslog-ng server logged this:
>>
>> "Sep 21 19:29:54 h164-19 1: - hostname procname procid - - Message"
>>
>> Question:
>> What is wrong in my message string?
>> The syslog-ng server why do not decode "1" after ">" as version?
>> Can i send old syslog message (RFC3164) without timestamp?
>>
>> Best Regards
>> Istvan Csuti
>>
>> ____________________________________________________________
>> __________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation: http://www.balabit.com/support/documentation/?product=
>> syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
> --
> Csuti István
> rendszergazda
> __________________________________________________
>
> Zalaszám Informatika Kft.
> 8900 Zalaegerszeg, Mártírok útja 53.
> Telefon: 92/502-593
> Fax: 92/502-501
> e-mail: icsuti at zalaszam.hu <%0Aicsuti at zalaszam.hu%09%09%09>
> web: www.zalaszam.hu
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160922/f8734997/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 30allo3.jpg
Type: image/jpeg
Size: 19422 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160922/f8734997/attachment-0001.jpg 


More information about the syslog-ng mailing list