[syslog-ng] Syslog server chaining issue

[Fabien Wernli]

Hi,

On 2024-12-11 12:47:29, Maurya, Shivani wrote:
> Hi All,
> 
> I am using 2 syslog servers on version 3.31. The devices are sending syslog message to 1st syslog server. The 1st syslog server is forwarding the same message to 2nd syslog server.
> 
> Device --> Syslog Server 1 --> Syslog Server 2

I would suggest that you use the syslog-ng() destination so you don't have
to worry about your udp template being reinterpreted poorly by the second
syslog-ng.

https://syslog-ng.github.io/admin-guide/020_The_concepts_of_syslog-ng/007_The_structure_of_a_log_message/002_EWMM_messages
https://syslog-ng.github.io/admin-guide/070_Destinations/310_syslog-ng/README
https://syslog-ng.github.io/admin-guide/060_Sources/000_Default-network-drivers/README