Re: [rsyslog] Malfored syslog records missing host and extra date

2017-08-23 Thread David Lang
gt;, rsyslog@lists.adiscon.com Subject: Re: [rsyslog] Malfored syslog records missing host and extra date First, thanks for the input! There are two lines posted below. The first one is from the local system, its own IPtables record. To me, this sure looks right. The second one is the line from

Re: [rsyslog] Malfored syslog records missing host and extra date

2017-08-21 Thread Don M Subscriptions via rsyslog
First, thanks for the input! There are two lines posted below. The first one is from the local system, its own IPtables record. To me, this sure looks right. The second one is the line from the external system, which is the syslog line that is incorrect. I did query the vendor, and it is

Re: [rsyslog] Malfored syslog records missing host and extra date

2017-08-18 Thread David Lang
templates define how rsyslog is going to output a line, but you are having problems because the data you are receiving is not formatted correctly and so the 'best effort' parsing is not giving you what you want. log with the format RSYSLOG_DebugFormat and post an example of the message that