[syslog-ng] grouping-by question

Газин Максим Алексеевич Maksim.Gazin at rt.ru
Thu Jun 20 07:17:28 UTC 2019

what does it mean? Is it possible to make the context-length equal to the value of the aggregated messages?

-----Original Message-----
From: syslog-ng [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Fabien Wernli
Sent: Thursday, June 13, 2019 10:42 AM
To: Syslog-ng users' and developers' mailing list <syslog-ng at lists.balabit.hu>
Subject: Re: [syslog-ng] grouping-by question


On Thu, Jun 13, 2019 at 07:35:04AM +0000, Газин Максим Алексеевич wrote:
> I have one more question: I send several messages that must be aggregated into one, but the context-length parameter always turns out to be increased by one. Why it happens?

Probably because the timeout is never reached?

Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

More information about the syslog-ng mailing list