We help IT Professionals succeed at work.

rsyslog raw message

Julio Jose
Julio Jose asked
on
4 Comments
1 Solution
632 Views
Last Modified: 2017-03-28
I have configure to receive the raw format on rsyslog.conf

$template myFormat,"%rawmsg%\n"
$ActionFileDefaultTemplate myFormat

but I still received the facility code in append on each of the log, how to get rid of it?

<46>Nov 02 10:37:39 …...
Comment
Watch Question

View Solution Only

skullnobrains
CERTIFIED EXPERT

Commented:
you need something along these lines

$template nofacility,"%timegenerated% %msg%\n"

not sure what "raw"msg stands for but it is probably the whole message syslog receives including the facility, tag, date...
Julio Jose

Author

Commented:
I tired, the facility code remove but append a new time format "Mar 27 11:12:19 <Raw Message>
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
Julio Jose

Author

Commented:
it work, thank you

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions