[syslog-ng] syslog 3.9 modifying ${MSG}?

[Nik Ambrosch]

After moving from syslog-ng 3.5 to 3.9 i noticed that the contents of $PROGRAM and $MSG are being logged differently than before.  Here is how they used to be logged:

# program: 53
# message: Apr 19 09:35:35.713 GMT: %ILPOWER-5-POWER_GRANTED: Interface xxx: Power granted                                 |

That is the full message (as seen on the device) which is optimal behavior.  Below is the behavior i’m seeing with syslog-ng 3.9 with similar configuration:

# program: GMT
# message: %ILPOWER-5-POWER_GRANTED: Interface xxx: Power granted

The value of program and message are altered but everything else is the same.  I’ve been investigating the date parser and the flags(no-parse) options but haven’t had any luck getting a properly formatted message yet.

If anyone has any ideas on how to get the old behavior back it would be greatly appreciated.