We are using rsyslog-4.7.3 on solaris 10 i86pc and getting unexpected behavior when we try to run rsyslog as the only system logger. All of the normal system syslogs processed by imsolaris seem to be facility user.notice.
Format: $template CustomFileFormat,"%timestamp% %syslogfacility-text%.%syslogseverity-text% %fromhost:::lowercase% %syslogtag%%msg:::drop-last-lf%\n" Example: Mar 18 13:59:43 user.notice 2.2.2.2 xntpd[330]: [ID 854739 daemon.info] synchronized to 1.1.1.1, stratum=2 The expectation is that the facility in this example would be "daemon.info" and not "user.notice". The original log message would have been "xntpd[330]: synchronized to 1.1.1.1, stratum=2". -Corey Smith _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
