Package: syslog-ng Version: 3.3.5-4 Severity: minor If ident contains space (like fail2ban does) then the space and the ':' separator ends up in msg. Configured syslog-ng with the following:
template tagged { template("r_isodate=$R_ISODATE host=$HOST program=$PROGRAM pid=$PID msg=$MSG\n"); }; destination debug { file("/tmp/syslog-ng.log" frac_digits(3) template(tagged)); }; log { source(input); destination(debug); }; and logging an ident with space: allan@pawan:~$ logger --tag 'test ' msg results in this log event: r_isodate=2013-10-07T03:09:46.652-04:00 host=pawan program=test pid= msg=: msg where I expected program = 'test ' and msg='msg' (no quotes). -- System Information: Debian Release: 7.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages syslog-ng depends on: ii syslog-ng-core 3.3.5-4 ii syslog-ng-mod-json 3.3.5-4 ii syslog-ng-mod-mongodb 3.3.5-4 ii syslog-ng-mod-sql 3.3.5-4 syslog-ng recommends no packages. syslog-ng suggests no packages. -- Configuration Files: /etc/default/syslog-ng changed [not included] /etc/init.d/syslog-ng changed [not included] /etc/logrotate.d/syslog-ng changed [not included] /etc/syslog-ng/syslog-ng.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org