hi all,
I was thinking what would be the best way for submitting events to the local rsyslog server. Quite often, piping one or more lines to /usr/bin/logger, or calling openlog(3) and syslog(3) are sufficient for the job. There are cases, however, when they are not good enough, since they restrict logging with a single tag.

As an alternative, one could communicate with rsyslog directly over the /dev/log UNIX domain socket. I was wondering what would be the best event format for writing to /dev/log. Typically, each call to syslog(3) uses the following format: <priority>timestamp tag: messagetext
(in other words, BSD syslog format without the hostname field)

However, rsyslog also has the ability to provide the incoming event with a timestamp if it is not present, and according to my observations, the following format is also handled properly by rsyslog:
<priority>tag: messagetext

I was wondering if the format without timestamp is something which can be safely used over different versions of rsyslog, and is supported alongside with regular format used by syslog(3).

kind regards,
risto

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to