Hallo Rainer, unfortunately logger from sysklogd v2.2.3 does not honor --rfc3164 or -rfc3164.
But parameter SysSock.UseSpecialParser="off" works perfect. Thank you. You made my day. Regards from your former homeland (Rheinland). Ansgar Am 22.06.2021 um 17:05 schrieb Rainer Gerhards:
Hi Ansgar, firstly, you should be able to specify the --rfc3164 switch to loger, which will then produce the old format. The message format change you notice is primarily because rsyslog does not expect 5424 format on the system log socket by default. To turn this on, use the SysSock.UseSpecialParser="off" parameter when loading imuxsock. Doc: https://www.rsyslog.com/doc/v8-stable/configuration/modules/imuxsock.html HTH Rainer El mar, 22 jun 2021 a las 14:01, Ansgar Puester via rsyslog (<[email protected]>) escribió:Hello, up to now we use the tool logger from util-linux 2.34 We would like to switch to logger from sysklogd v2.2.3 To test the new logger i used logger -t 'logger' -i -p local0.info "Testmessage" logger from util-linux 2.34 produces the message Template="RSYSLOG_TraditionalFileFormat" Jun 22 13:29:37 logserv.fritz.box logger[5849]: Testmessage Template="RSYSLOG_DebugFormat" Debug line with all properties: FROMHOST: 'logserv.fritz.box', fromhost-ip: '127.0.0.1', HOSTNAME: 'logserv.fritz.box', PRI: 134, syslogtag 'logger[5849]:', programname: 'logger', APP-NAME: 'logger', PROCID: '5849', MSGID: '-', TIMESTAMP: 'Jun 22 13:29:37', STRUCTURED-DATA: '-', msg: ' Testmessage' escaped msg: ' Testmessage' inputname: imuxsock rawmsg: '<134>Jun 22 13:29:37 logger[5849]: Testmessage' $!:{ "data": { "modprogramname": "logger" } } $.: $/: logger from sysklogd v2.2.3 produces the message Template="RSYSLOG_DebugFormat" Jun 22 13:29:51 logserv.fritz.box 1 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - Testmessage Template="RSYSLOG_DebugFormat" Debug line with all properties: FROMHOST: 'logserv.fritz.box', fromhost-ip: '127.0.0.1', HOSTNAME: 'logserv.fritz.box', PRI: 134, syslogtag '1', programname: '1', APP-NAME: '1', PROCID: '-', MSGID: '-', TIMESTAMP: 'Jun 22 13:29:51', STRUCTURED-DATA: '-', msg: ' 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - Testmessage ' escaped msg: ' 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - Testmessage ' inputname: imuxsock rawmsg: '<134>1 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - Testmessage ' $!:{ "data": { "modprogramname": "1" } } $.: $/: Is there a way to convert this new, unwanted message to the "old" message format? I did not find a parameter to tell logger from sysklogd v2.2.3 to produce the "old" message format. Does anybody have a solution? Thanks in advance Ansgar _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
