RB532 ROS 2.9.38
Hello all and thanks for your attention.
I am trying to implement a remote logging based on syslog-ng running on Debian/Linux, mysql and php-syslog-ng to view the stored logs.
Unfortunately syslog-ng receives all the messages coming from RB with the same FACILITY and SEVERITY; as explained in RFC3164 the log message standard has several parts all well documented; it seems that Mikrotik log message is out of standard, is it? I sniffed the packets coming from the RB and the MSG part containing all the useful things is not as per RFC3164; in particular it is missing the PRI and the HEADER part.
Please someone can explain if MT plans to conform these messages to RFC3164 standard? Alternatively is there another way to send to syslog-ng a PRI valid so it can distinguish between CRITICAL,WARNING and INFO messages?
Thanks to all
Regards - Alessandro - ROME - ITALY
we do not send these messages in the mentioned standards. we will see if we can do this in future versions.
Hello and many thanks for your reply. This will be a very useful upgrade, I will look forward to see when this will be implemented.
best regards
Alessandro