[rsyslog-notify] Forum Thread: Re: Removing <PRI> in a forwarded syslog message - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25965#p25965

Message: 
----------
I don't think things are working the way you think they are.

Please log using the template RSYSLOG_DebugFormat on your second server,
the rawmsg entry there will show you what is actually getting sent by the
first machine.

The problem you are running into is either

1. that what you are sending is not a properly formatted syslog message, so
when the receiving system tries to parse it, it ends up doing a lot of
guesswork to try and turn the 'garbage' that it's receiving into it's best
guess 

or 

2. you aren't using the format you created when you send the message.

can you show us the full configuration?