Hi, wait...
Rainer Gerhards wrote: >> Thank you David. Now I understand what you meant with "hostname". >> >> That's something Rainer should answer. Maybe a new regression in logger? >> > No. You tell logger *explicitely to use rfc3164 format*. If you do so, > logger simply thinks you really want that, and so it writes in rfc3164 > format. Now, this format is not the format the normally is spoken on the > log socket, and so the problem that you see appears. If you drop the > --rfc3164 option, everything will work fine. If you are right that would mean that logger has *3* formats: - RFC3164, which is used when you specify "--rfc3164" option - RFC5424, which is used when you specify "--rfc5424" option - ???, which is used when you don't specify "--rfc3164" nor "--rfc5424" option Are you really saying that? I would wonder because the help says > --rfc3164 use the obsolete BSD syslog protocol > --rfc5424[=<snip>] use the syslog protocol (the default); >From my understand there are only two formats: - RFC3164, which is used when you specify "--rfc3164" option. This was the default format (i.e. used when you don't specify a format option) until util-linux-2.26) - RFC5424, which is used when you specify "--rfc5424" option. This is the *new* default format (i.e. used when no format was specified at all) But it seems like you are right: > # logger --stderr foo > <13>Mar 9 13:22:11 root: foo > > # logger --stderr --rfc3164 foo > <13>Mar 9 13:22:21 vm-gentoo-x64 root: foo > > # logger --stderr --rfc5424 foo > <13>1 2015-03-09T13:22:48.163592+01:00 vm-gentoo-x64 root - [timeQuality > tzKnown="1" isSynced="1" syncAccuracy="235016"] foo > > # logger -V > logger from util-linux 2.26.65-c9580 How is the first format named? Also I don't understand how you could propose https://github.com/rgerhards/rsyslog/commit/de082e425f3f6d430eb136a2fb230d58b7e9580e How could you expect that this would work/be enough? It was the proposed patch (and the help) why I thought that "RFC3164" was the format used before util-linux-2.26... so if we fall back to RFC3164 everything should work again but now it seems like that's wrong :/ I am currently very confused ;-) -Thomas _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

