asked on rsyslog raw message
I have configure to receive the raw format on rsyslog.conf
$template myFormat,"%rawmsg%\n"
$ActionFileDefaultTemplate
but I still received the facility code in append on each of the log, how to get rid of it?
<46>Nov 02 10:37:39 …...
$template myFormat,"%rawmsg%\n"
$ActionFileDefaultTemplate
but I still received the facility code in append on each of the log, how to get rid of it?
<46>Nov 02 10:37:39 …...
LinuxLinux Distributions
Last Comment
Julio Jose
ASKER
I tired, the facility code remove but append a new time format "Mar 27 11:12:19 <Raw Message>
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
it work, thank you
$template nofacility,"%timegenerated
not sure what "raw"msg stands for but it is probably the whole message syslog receives including the facility, tag, date...