Ok, it sounds as if that kamaili program is sending bad information.
Please log using RSYSLOG_DebugFormat to validate what is being sent by the
application (rawlog) and how it's getting parsed
In this case, I doubt that that's getting into programname or syslogtag, because
those are limited to a smallish size (32 characters??) and since this is so
long, I'll bet it's getting dumped into the msg variable.
This isn't data generated by rsyslog, it's data being generated by the program
doing the logging, and it's not following the RFC, so the "right" answer is to
fix the programms logging :-)
now, if you can't do that, we will need to work around the problem, and before
we can do anything, we need to check and see what data is ending up in what
variable.
David Lang
On Mon, 2 Jun 2014, Rory Toma wrote:
I believe programname is part of syslogtag.
I get:
2014-06-02T22:14:39-07:00 hostname /var/local/kamailio/sbin/kamaili INFO: ctl
[io_listener.c:221]: io_listen_loop: using epoll_lt as the io watch method
(auto detected)
I'd like the full path there to not be there. I can probably fix that by
executing "./kamailio" instead of invoking it with the full path, but I was
wondering if there was a good way to do this generically.
thx
On 6/2/14, 3:31 PM, David Lang wrote:
On Mon, 2 Jun 2014, Rory Toma wrote:
I have a template that is of the form:
$template Test,"<%PRI%>%TIMESTAMP% %HOSTNAME%
%syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg:::space-cc%"
This results in a full path on my receiver for programname. Is there a way
I can have it send only the basename, and not the path?
I'm not understanding what you are asking, programname doesn't appear
anywhere in this template
could you give an example of a log message you get, what the result
currently is with that message, and what you want it to be?
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
