[syslog-ng]Getting Logs in Triplicate
Nate Campi
syslog-ng@lists.balabit.hu
Thu, 20 Jan 2005 09:47:57 -0800
On Thu, Jan 20, 2005 at 06:01:20AM -0800, Rhugga wrote:
>
> I am assuming syslog-ng is adding this field since the copy of the log
> entry in the local /var/adm/messages file does not contain this.
Solaris is adding that, and I don't think you can completely remove this
but you can modify it's behavior (you can turn off the message ID, I
know that for sure).
See https://lists.balabit.hu/pipermail/syslog-ng/2004-August/006329.html
--
Nate
"Prosperity is the surest breeder of insolence I know." - Samuel Clemens