On Sun, 31 Jul 2011, [email protected] wrote:
I didn't even know you could do (r)syslog without facilities. Every client app,
when configured to log to syslog, seems to require a facility, even if not a
severity. I'd love to get rid of this albatross. Is this a good start?:
http://www.rsyslog.com/doc/rsyslog_conf_filter.html
Are you basically saying that one can ignore true "syslog" and just have a
client
server's rsyslogd remotely log any text log file to the log server, based on
these
filters?
Is it safe to assume that Adiscon's own LogAnalyzer can digest these
non-syslog-like logs without much trouble?
the over-the-wire protocol still has a facility and severity in it, but if
you just ignore it and don't use it to make any decsisions about what to
do with the log, it may as well not be there.
it's more a case of ignoring the (almost) useless field than it is
changing the protocol.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
