Stephan Seitz <[email protected]> schrieb am Mo., 23. Juli
2018, 21:52:

> On Mo, Jul 23, 2018 at 04:20:10 +0200, Rainer Gerhards wrote:
> >simple explanation: the colon cannot be part of a hostname (RFC
> >restriction). So rsyslog know that "CES:" is not a hostname and the
> >heuristic of the default parser so dos not assign one. In contrary.
> >"CES" is a perfect hostname and so it is used as such.
>
> Should the log message start with a hostname?


Well, it's unfortunately not that easy -details:

https://www.rsyslog.com/doc/v8-stable/whitepapers/syslog_parsing.html

Rainer

If this is a RFC violation
> I may be able to open a support ticket.
>
> And by the way, CES is Common European Summertime (sometimes called CEST
> too).
>
> Shade and sweet water!
>
>         Stephan
>
> --
> | Public Keys: http://fsing.rootsland.net/~stse/keys.html |
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to