MonitorWare Knowledge Base

Sorry, but I have another question. I added the following to my rsyslog.conf:

$template dummy,"[%msg%]\n"
*.* /var/log/dummy; dummy

I then ran the command:

logger "test"

In the file /var/log/dummy, I see
[ test]

Should that extra space be there?

Thanks,
Elizabeth

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Indeed, it should. That's an artifact of RFC 3164 based parsing. The first character immediately after the TAG is already part of MSG. It is not a space-delimited field. As a consequence, most of the MSGs start with a blank.

Rainer

Thanks for your response. My workaround is to add a dummy field at the front of my message so I start using my data from the second delimited field.