> >>> kern.info @[zenhost]:1154 > >> > >> what is your default template? if you could run a quick test and add > ;RSYSLOG_Traditional_Forward_Format to the line and see if you get the > format I am expecting. > > > > # Use traditional timestamp format > > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
Be careful, this is the default format for *writing logfiles* - it does not affect omudpspoof. I have just checked the code, the default format is hardcoded to RSYSLOG_TraditionalForwardFormat, which should be just right (with the PRI at the beginning of the message). I could add some additional debug instrumentation to omudpspoof, mabe that gets us some additional information about the internal state. Of course, this means that a debug log must be generated. Should I look into that? Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards
