2016-02-16 8:07 GMT+01:00 Muhammad Asif <[email protected]>: > Hi Geeks, > > > I need to ask two things. > > 1- When i use following timestamp format, log file turn messy. I mean all > logs continously with some space. (Not one log in one line) > > $template CustomFormat,"<%pri%>%timegenerated:1:27:date-rfc3339% > %syslogtag%%msg%" > > $ActionFileDefaultTemplate CustomForma > > > http://pastebin.com/eh7tTctL > > > you need to add \n at the end of the template, this is the LF you are missing.
> 2- Second, as shown in attached logs, I want to remove timestamps being > attached from devices and attached new by rsyslog and then forward to > remote server. How can i do this. > > you need to look at what is in which field (use RSYSLOG_DebugFormat) and then adjust your template accordingly. Rainer > > > Regards > > M. Asif > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

