Package: syslog-ng
Version: 3.3.5-4
Severity: minor
If ident contains space (like fail2ban does) then the space and the ':'
separator ends up in msg. Configured syslog-ng with the following:
template tagged {
template("r_isodate=$R_ISODATE host=$HOST program=$PROGRAM pid=$PID
msg=$MSG\n");
};
destination debug {
file("/tmp/syslog-ng.log" frac_digits(3) template(tagged));
};
log {
source(input);
destination(debug);
};
and logging an ident with space:
allan@pawan:~$ logger --tag 'test ' msg
results in this log event:
r_isodate=2013-10-07T03:09:46.652-04:00 host=pawan program=test pid=
msg=: msg
where I expected program = 'test ' and msg='msg' (no quotes).
-- System Information:
Debian Release: 7.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages syslog-ng depends on:
ii syslog-ng-core 3.3.5-4
ii syslog-ng-mod-json 3.3.5-4
ii syslog-ng-mod-mongodb 3.3.5-4
ii syslog-ng-mod-sql 3.3.5-4
syslog-ng recommends no packages.
syslog-ng suggests no packages.
-- Configuration Files:
/etc/default/syslog-ng changed [not included]
/etc/init.d/syslog-ng changed [not included]
/etc/logrotate.d/syslog-ng changed [not included]
/etc/syslog-ng/syslog-ng.conf changed [not included]
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
