Wrong string escaping for syslog

Luca Rebellato added a comment - 2020/07/15 08:31 PM Done. Thank you for the suggestion. Regards, Luca

Mike Stupalov added a comment - 2020/07/15 07:14 PM yes, just remove template-escape(yes)

Luca Rebellato added a comment - 2020/07/15 04:42 PM Do you suggest to disable escaping in syslog-ng template?

Mike Stupalov added a comment - 2020/07/15 01:14 PM Ahh, this is syslog-ng.. and sure - this is template escaping by template-escape(yes) , not sure why we use this.

Luca Rebellato added a comment - 2020/07/15 11:44 AM Hi Mike, Observium version is Observium 20.7 . 10596 ##### Software versions ##### o OS Linux 5.0 . 0 - 1033 -gcp [amd64] (Ubuntu 18.04 ) o Apache 2.4 . 29 o PHP 7.2 . 24 -0ubuntu0. 18.04 . 6 (OPcache: DISABLED) o Python 2.7 . 17 o MySQL 5.7 . 14 -google-log (extension: mysqli 5.0 . 12 -dev) o SNMP NET-SNMP 5.7 . 3 o RRDtool 1.7 . 0 o Fping 4.0 (IPv4 and IPv6) ##### Memory Limit ##### o PHP Unlimited ##### MySQL mode ##### o MySQL NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION ##### Charset info ##### o PHP UTF- 8 o MySQL utf8 ##### Timezones info ##### o Date Wednesday, 15 -Jul- 20 10 : 36 : 25 UTC o PHP + 00 : 00 o MySQL + 00 : 00   and this is syslog-ng configuration: source s_net { udp(); }; destination d_observium { program( "/opt/observium/syslog.php" template ( "$HOST||$FACILITY||$LEVEL_NUM||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n" ) template-escape(yes)); }; log { source(s_net); destination(d_observium); };   Thank you for the fix! Luca

Mike Stupalov added a comment - 2020/07/14 10:15 PM Anyway cleaned in r10596.

Mike Stupalov added a comment - 2020/07/14 06:39 PM additioanly, please show your software versions by: ./discovery.php -VV

Mike Stupalov added a comment - 2020/07/14 06:12 PM - edited There no double escaping, this is extra escaping on rsyslog side. (all params of course escaped when display on page, but there received from rsyslog with escape backslashes, I'm not sure why). Show your rsyslog template for observium.