[rsyslog] Leading whitespace

Mike McGrath mmcgrath at redhat.com
Thu Jul 24 15:41:59 CEST 2008


On Thu, 24 Jul 2008, Rainer Gerhards wrote:

> This is rooted in RFC 3164. A description can be found here:
>
> http://lists.adiscon.net/pipermail/rsyslog/2008-July/000893.html
>
> If you want to consistently get rid of that SP, you can remove it via
> the property replacer. I think this works:
>
> $template RawMessage,"%msg:2%\n"
>
> if not, then this ;)
>
> $template RawMessage,"%msg:2:2048%\n"
>
> Let us know if that cured the problem.
>

%msg:2:2048% seems to work perfectly, thank you.

	-Mike


More information about the rsyslog mailing list