parser.escapeControlCharactersCStyle="on" will escape newlines, the others will not IIRC
On Mon, Mar 9, 2015 at 3:29 PM, David Lang <[email protected]> wrote: > I thought that the default was to escape control characters on receive, > does this now handle newlines as well? > > David Lang > > > On Mon, 9 Mar 2015, Nathan Brown wrote: > > Take a look at http://www.rsyslog.com/doc/global.html >> >> global ( >> parser.escapeControlCharactersCStyle="on" >> parser.escapeControlCharactersOnReceive="on" >> ) >> >> On Mon, Mar 9, 2015 at 3:03 PM, David Lang <[email protected]> wrote: >> >> On Mon, 9 Mar 2015, Troels Arvin wrote: >>> >>> Hello, >>> >>>> >>>> Using rsyslog 7.4.7. >>>> >>>> Once in a while, some equipment sends a message which includes newline >>>> chars into our central syslog server. This disturbs my filtering of >>>> /var/ >>>> log/messages. >>>> >>>> Can rsyslog be configured to replace incoming newline characters with >>>> another character, such as a space? >>>> >>>> >>> the 'right' think to happen is to have the newline replaced with #012 to >>> match the rest of the control character escaping. >>> >>> This isn't currently happening because traditionally a newline indicated >>> the end of the log message, so it didn't need escaping, and when it >>> became >>> possible to have a newline in the message, it didn't get added. >>> >>> Rainer, do you want a bug for this? or will you just add it to your todo >>> list? >>> >>> David Lang >>> _______________________________________________ >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com/professional-services/ >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >>> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> >> _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
