[rsyslog] filter logger tags from syslog

[david at lang.hm]

On Thu, 26 Nov 2009, Jose Sanchez wrote:

> Will this work if Im using rsyslog just at the server side? (client is using syslog)

yes, although depending on exactly which syslog you may need to tinker 
with the template.

try what Rainer suggested below and see what you get out.

David Lang

> Many thanks.
>
> --- On Thu, 11/26/09, Rainer Gerhards <rgerhards at hq.adiscon.com> wrote:
>
>> From: Rainer Gerhards <rgerhards at hq.adiscon.com>
>> Subject: Re: [rsyslog] filter logger tags from syslog
>> To: "rsyslog-users" <rsyslog at lists.adiscon.com>
>> Date: Thursday, November 26, 2009, 2:11 AM
>> I don't have the specifics at hand,
>> but you can surely do that. I would even
>> assume that if you just write the %msg% property to file,
>> the infomation
>> should look good. If not, you need to fiddle a bit with the
>> property
>> replacer.
>>
>> The basic idea is to use
>>
>> $template line,"%msg%\n"
>> *.* /path/to/log;line
>>
>> HTH
>> Rainer
>>
>>> -----Original Message-----
>>> From: rsyslog-bounces at lists.adiscon.com
>>
>>> [mailto:rsyslog-bounces at lists.adiscon.com]
>> On Behalf Of Jose Sanchez
>>> Sent: Thursday, November 26, 2009 5:23 AM
>>> To: rsyslog at lists.adiscon.com
>>> Subject: [rsyslog] filter logger tags from syslog
>>>
>>> Hello,
>>>
>>> I've been using classic syslog for centralizing apache
>> access
>>> logs from one server to a remote syslog server, the
>> thing is
>>> syslog adds some nasty tags before the lines in the
>> access
>>> logs and I cant get them off, ie:
>>>
>>> "Nov 25 21:25:37 server1 logger:"
>>>
>>> I would like to know if rsyslog has the option to
>> filter this
>>> kind of stuff, I just want to have the logs sent to
>> the
>>> syslog server exactly like I was saving them in a
>> local
>>> access.log file.
>>>
>>> Thanks in advance.
>>>
>>>
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com
>>>
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com
>>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>