On Tue, Oct 11, 2011 at 10:07:41PM -0700, [email protected] wrote: > I think that what you end up doing is manipulating the logfile too > much on the relay system.
The only manipulations which should be happening on the relay system should be limited to the file writing action, using the dynafile template and the format template. The following action relaying to the archive server should have no manipulations applied. > make a temporary output file on the relay system to log with the > debug format (RSYSLOG_DEBUG IIRC) and you will see everything that > is arriving, then decide if you need to manipulate it more before > sending it on to the archive server. I'm setting this up on my relay server right now. Hopefully you're right and the answer will jump out at me. :) > remember that each step in the process is working with what it was > sent, not what the software originally wrote to the log. Right, so the relay server should contain the modified $msg format sent from the client, and since the relay action itself (*.* @@logarchive) contains no further manipulations, it *should* just pass through as-is, without further manipulations... At any rate, to the debugging logfile I go! Thanks, Gregory -- Gregory K. Ruiz-Ade <[email protected]> OpenPGP Key ID: EAF4844B keyserver: pgpkeys.mit.edu _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
