On Wed, Mar 05, 2014 at 07:11:57PM +0100, Daniel Pocock wrote: > When you say "first link", did you mean this one: > > http://www.rsyslog.com/using-mongodb-with-rsyslog-and-loganalyzer/
Yes. > I had a look at that > > It basically appears that > > a) local log entries and entries defined on existing transports are not > sent to mongodb using anything in that example Agreed. > b) log entries received over TCP port 13514 will be sent to mongodb, but > only if they are in the CEE format (not just any syslog entry) Agreed. > When you say broke your remote syslog, maybe your remote syslog is not > sending to it with CEE format? I guess so. I'm not familiar with the various formats, I was merely tinkering around. > I'm not sure that everybody will want to use the CEE format, many > devices may only support regular syslog format, so a more basic example > is needed too Agreed. Cheers, Flo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
