MonitorWare Knowledge Base

[petersabaini]

I log to a central server and have configured the templates such:

$ActionFileDefaultTemplate RSYSLOG_FileFormat

While debugging an unrelated problem I ran rsyslogd in debug mode I got this:
"9844.787696017:f75c7b90: Message has legacy syslog format"

Is this normal? Should I use RSYSLOG_ForwardFormat ?

[rgerhards]

This is from the parser, which detects that the incoming message is in legacy format. As long as the sender doesn't claim it is RFC5424, everything is in perfect order

[petersabaini]

Thanks -- I'll post the "unrelated problem" in a new thread