I am useing the following rules to send apache log perfectly tagged to syslog and than to remote logging server over tcp 514. On local servers syslog receives and stores messages perfectly however on the remote server only the first 32 character of program name appear in the syslog.
clients: apache conf: ErrorLog "|/usr/bin/logger -p local6.warn -t httpd_eurwebtest01.eurweb.xxxxx.com" CustomLog "|/usr/bin/logger -p local6.info -t httpd_eurwebtest01.eurweb.xxxxx.com" combined server: rsyslog conf: $template ApacheLogFormat,"%msg:2:10000%\n" $template local6error,"/srv/log/apache2/%programname:7:50%_error_log.%$YEAR%%$MONTH%%$DAY%" $template local6access,"/srv/log/apache2/%programname:7:50%_access_log.%$YEAR%%$MONTH%%$DAY%" if $syslogfacility-text == 'local6' and $syslogseverity-text == 'warn' and $programname startswith 'httpd' then -?local6error;ApacheLogFormat #& ~ if $syslogfacility-text == 'local6' and $syslogseverity-text == 'info' and $programname startswith 'httpd' then -?local6access;ApacheLogFormat #& ~ Any idea ? Is there a limitation on program name if you send it to a remote host? Thanks Peter _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
