I think your complaint is answered in the blog you cite... "rsyslog can force the pid inside the TAG to match the pid of the log message emitter - for quite a while now. It is also easy to add additional "trusted properties"."
Dan On Fri, Oct 3, 2014 at 6:25 PM, Jiri B <ji...@devio.us> wrote: > On Fri, Oct 03, 2014 at 04:37:06PM -0400, sven falempin wrote: > > Dear list, > > > > Why the level information of logs are not present in log files (and yes i > > could put a certain level in a certain file but then i have to sort it > > all..) ? > > Because "classic" syslog format is very free-form. > Sorry but is this only your problem with syslog? :) > > There are more issues, see: > > - http://blog.gerhards.net/2011/11/serious-syslog-problems.html > > For me highest issue is one cannot trust origin of the message. > > Oct 4 00:20:01 laptop1 foobar: hello world > > So did this message, which user, which pid? > > j.
