Forum Discussion
Wouter_de_Bruin
Nimbostratus
Jul 09, 2008Can I change default syslog facilities? (9.4.3)
Hello,
is there a way to change the default syslog facilities?
We have an external syslog server (Not managed by us, of course;-) which only forwards facilty 7 messages to the log files ...
geffryti_32102
Nimbostratus
Jun 14, 2011Thanks Nitass.
I tried follow that but I get the below error...
b syslog include '"
local3.* /var/log/asm
filter f_local3a {
facility(local3);
};
destination d_asmtest {
file("/var/log/custom/asm_log_file"
template("<190>$DATE $HOST $MSGHDR$MSG\n"; template_escape(no)));
};
log {
source(local);
filter(f_local3a);
destination(d_asmtest);
};
"'
BIGpipe parsing error:
012e0022:3: The requested value (/var/log/custom/asm_log_file") is invalid (show | ( | none)) for 'include' in 'syslog'
I felt that bigpipe had it's own way of parsing templates, so I reference an existing template field in the original syslog conf file... and this is what I got... it had to declare the template and then bind it with the destination file... I followed the format but didn't help though... I will try out other things, but if you have any idea where I'm wrong here, I would appreciate it.. tnx
note: this is one of our spare units... so the destination file changed a little
b syslog include '"
local3.* /var/log/asm
filter f_local3a {
facility(local3);
};
template t_asm {
template("<190> $DATE $HOST $MSGHDR$MSG\n");
template_escape(no);
};
destination d_asmtest {
file("/var/log/lost+found/output/testasmlog" template(t_asm));
};
log {
source(local);
filter(f_local3a);
destination(d_asmtest);
};
"'
BIGpipe parsing error:
012e0022:3: The requested value (<190> $DATE) is invalid (show | | none) for 'include' in 'syslog'
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects