[rsyslog] Syslogtags with whitespaces misparsed?

RB aoz.syn at gmail.com
Fri Jul 17 15:54:40 CEST 2009


On Fri, Jul 17, 2009 at 07:05, Luis Fernando Muñoz
Mejías<Luis.Fernando.Munoz.Mejias at cern.ch> wrote:
> there is no way to configure rsyslog to solve it. Another funny example
> is syslog's habit of saying "last message repeated N times". These
> messages don't have a colon or anything useful to delimit the
> application name. In this case, I receive *lots* of messages from a host
> called "last".

It was these precise messages from *BSD that drove me to using the
fromhost-ip property as opposed to whatever the sender "says" they
are.  It breaks down in the face of relay hosts, but when I get to the
point of needing those I plan on relying on secondary parsing.



More information about the rsyslog mailing list