With syslog-ng, you could use the template() feature to rewrite the message in the format you like. A template let you format the message using some tags and characters you want i.e. $ISODATE $HOST [$FACILITY.$SEVERITY] $MESSAGE The linux syslogd AFAIK doesn't support Solaris style of writing messages with their facility/severity Amodiovalerio [Hypo] Verde ----- Original Message ----- From: "Tina Bird" <tbird@precision-guesswork.com> To: <loganalysis@private> Sent: Saturday, October 25, 2003 3:27 AM Subject: [logs] stupid question about facility and level > Hi all -- > > I'm having no luck tracking down this bit of trivia. > > How do I make syslog record facility and level when it records a message? > Looks like Solaris syslog does it by default, but darned if I can figure > out how to do it on any of the Linux or *BSD variants. > > Also curious about how to do it on syslog-ng if anyone knows off the top > of their head -- still working through the documentation there. > > thanks for any info -- tbird > > -- > At what point does it become easier to maintain a human relationship > than a Windows box? > > Robert Cowles > > http://www.precision-guesswork.com > Log Analysis http://www.loganalysis.org > VPN http://vpn.shmoo.com > tbird's Security Alerts http://securecomputing.stanford.edu/alert.html > _______________________________________________ > LogAnalysis mailing list > LogAnalysis@private > http://lists.shmoo.com/mailman/listinfo/loganalysis _______________________________________________ LogAnalysis mailing list LogAnalysis@private http://lists.shmoo.com/mailman/listinfo/loganalysis
This archive was generated by hypermail 2b30 : Sat Oct 25 2003 - 12:54:41 PDT