It was thus said that the Great Rainer Gerhards once stated:
>
>
> > > In my own project, I treat it as MSG = "hostname junk" with a
> > > facility of
> > > USER and priority of NOTICE (as per section 4.3.3 of RFC-3164).
>
> Oh, yes, you got me here. So please elaborate how you parse
>
> "<13>hostname junk"
>
> ;)
It's be interpreted as:
version: 0 (here, that means RFC-3164)
host: (whatever originally sent the message)
relay: (same as above, as it obviously wasn't relayed)
timestamp: (when it was received)
logtimestatmp: (same as above, since it is missing a timestamp)
program: ""
pid: 0
facility: user
level: notice (this is priority---I call it level)
msg: hostname junk
If instead it was:
<15>hostname junk
my program would parse it as:
version: 0 (here, that means RFC-3164)
host: (whatever originally sent the message)
relay: (same as above, as it obviously wasn't relayed)
timestamp: (when it was received)
logtimestatmp: (same as above, since it is missing a timestamp)
program: ""
pid: 0
facility: user
level: debug
msg: hostname junk
-spc (At least it's consistent 8-)
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
