I believe that both of theones I mentioned below are drop-in replacements.
http://www.rsyslog.com/tag/log4j/
http://logback.qos.ch/
David Lang
On Fri, 17 May 2013, Hanish Bansal wrote:
In log4j.xml i used:
<appender name="syslog" class="org.apache.log4j.net.SyslogAppender">
<param name="facility" value="local1" />
<param name="facilityPrinting" value="true" />
<param name="syslogHost" value="localhost" />
<param name="threshold" value="debug" />
<layout class="org.apache.log4j.PatternLayout">
<param name="ConversionPattern" value="[%p] %c{1}:%L - %m%n" />
</layout>
</appender>
Is there any other appender that i can replace here to resolve the problem?
On Fri, May 17, 2013 at 7:40 AM, David Lang <[email protected]> wrote:
On Fri, 17 May 2013, Hanish Bansal wrote:
I'm using CentOs 6.3.
rsyslog version : rsyslogd 5.8.10
I am maintaining Java logs through syslog using a syslog appender in
log4j.
But its creating multiple-lines for long lines.
To avoid this i defined MaxMessageSize to 64k in "/etc/rsyslog.conf":
$MaxMessageSize 32768
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
After that i restarted rsyslog.
But its not working. Any suggestion?
I strongly suspect that the problem in on the log4j side. I believe that
the default log4j splits syslog messages at the 1K boundry and sends them
as multiple messages. You can see this if you do a 'tcpdump -s 0 -A port
514'
rsyslog has a log4j replacement up that fixes many of the problems in the
stock log4j
http://www.rsyslog.com/tag/**log4j/<http://www.rsyslog.com/tag/log4j/>
there's also logback http://logback.qos.ch/ which is written by the
original author of log4j
David Lang
______________________________**_________________
rsyslog mailing list
http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog>
http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/>
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
