Hi Ansgar, firstly, you should be able to specify the --rfc3164 switch to loger, which will then produce the old format.
The message format change you notice is primarily because rsyslog does not expect 5424 format on the system log socket by default. To turn this on, use the SysSock.UseSpecialParser="off" parameter when loading imuxsock. Doc: https://www.rsyslog.com/doc/v8-stable/configuration/modules/imuxsock.html HTH Rainer El mar, 22 jun 2021 a las 14:01, Ansgar Puester via rsyslog (<[email protected]>) escribió: > > Hello, > > up to now we use the tool logger from util-linux 2.34 > We would like to switch to logger from sysklogd v2.2.3 > > To test the new logger i used > logger -t 'logger' -i -p local0.info "Testmessage" > > logger from util-linux 2.34 produces the message > > Template="RSYSLOG_TraditionalFileFormat" > Jun 22 13:29:37 logserv.fritz.box logger[5849]: Testmessage > > Template="RSYSLOG_DebugFormat" > Debug line with all properties: > FROMHOST: 'logserv.fritz.box', fromhost-ip: '127.0.0.1', HOSTNAME: > 'logserv.fritz.box', PRI: 134, > syslogtag 'logger[5849]:', programname: 'logger', APP-NAME: 'logger', > PROCID: '5849', MSGID: '-', > TIMESTAMP: 'Jun 22 13:29:37', STRUCTURED-DATA: '-', > msg: ' Testmessage' > escaped msg: ' Testmessage' > inputname: imuxsock rawmsg: '<134>Jun 22 13:29:37 logger[5849]: Testmessage' > $!:{ "data": { "modprogramname": "logger" } } > $.: > $/: > > logger from sysklogd v2.2.3 produces the message > > Template="RSYSLOG_DebugFormat" > Jun 22 13:29:51 logserv.fritz.box 1 2021-06-22T13:29:51.413381+02:00 > logserv logger 5850 - - Testmessage > > Template="RSYSLOG_DebugFormat" > Debug line with all properties: > FROMHOST: 'logserv.fritz.box', fromhost-ip: '127.0.0.1', HOSTNAME: > 'logserv.fritz.box', PRI: 134, > syslogtag '1', programname: '1', APP-NAME: '1', PROCID: '-', MSGID: '-', > TIMESTAMP: 'Jun 22 13:29:51', STRUCTURED-DATA: '-', > msg: ' 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - > Testmessage ' > escaped msg: ' 2021-06-22T13:29:51.413381+02:00 logserv logger 5850 - - > Testmessage ' > inputname: imuxsock rawmsg: '<134>1 2021-06-22T13:29:51.413381+02:00 > logserv logger 5850 - - Testmessage ' > $!:{ "data": { "modprogramname": "1" } } > $.: > $/: > > Is there a way to convert this new, unwanted message to the "old" > message format? > I did not find a parameter to tell logger from sysklogd v2.2.3 > to produce the "old" message format. > > Does anybody have a solution? > > Thanks in advance > Ansgar > > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
