[syslog-ng] grouping-by question

[Газин Максим Алексеевич]

what does it mean? Is it possible to make the context-length equal to the value of the aggregated messages?

-----Original Message-----
From: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Fabien Wernli
Sent: Thursday, June 13, 2019 10:42 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] grouping-by question

Hi,

On Thu, Jun 13, 2019 at 07:35:04AM +0000, Газин Максим Алексеевич wrote:
> I have one more question: I send several messages that must be aggregated into one, but the context-length parameter always turns out to be increased by one. Why it happens?

Probably because the timeout is never reached?

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq