[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')

[noreply at adiscon.com]

User: awinberg 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26731#p26731

Message: 
----------
[quote:12bynakx]Which template do you use on the client to forward
it?[/quote:12bynakx]

Here it is:
[code:12bynakx]$template
oversizeTag,"<%PRI%>%TIMESTAMP:::date-rfc3339% %HOSTNAME%
%syslogtag%%msg:::sp-if-no-1st-sp%%msg%"[/code:12bynakx]
I believe this was set up to allow for larger syslogtags. 

Actually, the debug output i provided is from the client, not the
logserver. The logserver handles ~150G/day so I can only enable debug there
for very short times, and I have not yet been able to catch a 'faulty'
message that way. I will try some more...