Jeremy Maryott <j...@hampshire.edu> writes: > Although the problem with weird long lines only showed up when I was > logging remotely, local rsyslog also thinks the facility is bad; it looks > like it just handles it better. If I log with a template like: > "%timegenerated% %PRI-text%: %syslogfacility% %syslogpriority% %HOSTNAME% > %syslogtag%%msg:::drop-last-lf%\n" then %syslogfacility% becomes 'invld'.
> The RFC (5424) says that "Facility values MUST be in the range of 0 to 23 > inclusive," so it seems like rsyslog is correct in expecting something in > that range. Right, but the configuration is not using the syslog protocol. It's using LocalSyslogAppender, which is supposed to be calling the C syslog() function, and it's supposed to use LOG_DAEMON, which uses the facility shifted by 3 (because it's combined with the priority). I think I need to go look at the source code again. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org