Minor Description
hi,
In my syslog-ng I have:
destination d_observium
{ program("/opt/observium/syslog.php" template ("$HOST||$FACILITY||$PRIORI TY||$LEVEL||$TAG||$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC||$MSG||$PROGRAM\n") template -escape(yes)); };
But In the mysql table it looks like:
-----------------------------------------------------------------------
| device_id | facility | priority | level | tag | timestamp | program | msg | seq |
-----------------------------------------------------------------------
| 12 | local7 | 6 | 6 | be | 2014-05-20 23:00:39 | % | 13057 | |
| 12 | local7 | 6 | 6 | be | 2014-05-20 23:00:39 | % | 13058 | |
| 12 | local7 | 6 | 6 | be | 2014-05-20 23:00:47 | % | 13059 | |
| 12 | local7 | 6 | 6 | be | 2014-05-20 23:00:48 | % | 13060 |
Only on my catos device. IOS devices run find
Attachments
Activity
There are several different formats that IOS devices will send out depending upon version and configuration.
The syslog stuff is currently considered broken, mostly because parsing out the different formats is a nightmare.
Any patches must not break anything which currently works.
Hi Adam,
you don't need to explain anything. Maybe it wasn't clear in my post: this patch solves only an issue with my cisco 2851 devices. It was not intended to be a generell solution.
Nontheless i think this is a bug inside of observium. 
Have a good weekend!
Helge
You seem to have removed support for one format of syslog message in favour of a different format of syslog format.
I'm sure I don't need to explain why this is suboptimal, and won't be committed.
Fixed in r6169.
Pls try. Note, restart syslog service - required.