Hi, First time posting, I don't think this has been asked before, but if I missed an answer I apologise.
I'm currently logging syslog messages of a cisco callmanager to a mysql DB via rsyslog with the following config: --- $ModLoad imudp $UDPServerRun 514 $ModLoad ommysql $template FILENAME,"/var/log/%fromhost-ip%/syslog.log" *.* ?FILENAME *.* :ommysql:HOSTNAME,Syslog,sysloguser,PASSWORD --- This config logs everything to: /var/log/syslog /var/log/[IPADDRESS]/syslog.log And to my mysql server. I have one issue, because I'm relaying each message has two date stamps: Feb 10 08:49:08 192.168.10.9 2372489: Feb 10 09:01:40.753: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up This means that everything gets put in the sql db taking the date stamp from the relay and logging the entire log in the 'message' field. Is there a way to put rsyslog into a 'transparent' mode where it relays the messages unmodified. Thank you for any pointers. T. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
