From 9eb9ae70cececbd047af19d128c7c90b1bbedc99 Mon Sep 17 00:00:00 2001 From: "Zsolt Gyulai (zgyulai)" Date: Mon, 15 Jul 2024 10:36:49 +0200 Subject: [PATCH 1/2] Added ignore-aux-data source flag. Signed-off-by: Zsolt Gyulai (zgyulai) --- _includes/doc/admin-guide/options/flags.md | 1 + 1 file changed, 1 insertion(+) diff --git a/_includes/doc/admin-guide/options/flags.md b/_includes/doc/admin-guide/options/flags.md index 71879550..237b413d 100644 --- a/_includes/doc/admin-guide/options/flags.md +++ b/_includes/doc/admin-guide/options/flags.md @@ -8,6 +8,7 @@ * `empty-lines`: Use the empty-lines flag to keep the empty lines of the messages. Otherwise, these lines are automatically removed. * `expect-hostname`: When this flag is used syslog-ng OSE expects a log message that contains a hostname and parses the message accordingly. This is the default behavior for TCP sources. Note that pipe sources use the `no-hostname` flag by default. * `guess-timezone`: This flag allows the source to attempt to guess the timezone of the message if this information is not available in the message. Works when the incoming message stream is close to real time, and the timezone information is missing from the timestamp. +* `ignore-aux-data`: This flag enables the source to ignore auxiliary data. * `kernel`: This flag sets the source default to the `LOG_KERN | LOG_NOTICE` priority if not specified otherwise. * `no-header`: This flag triggers syslog-ng OSE to parse only the `PRI` field of incoming messages, and put the rest of the message contents into `MSG`. The functionality of `no-header` is similar to the `no-parse` flag, but the `no-header` flag does not skip the `PRI` field. The `no-header` flag signals syslog-ng OSE that the syslog header is not present (or does not adhere to the conventions / RFCs), so the entire message (except from the `PRI` field) is put into `MSG`. From 19d54ea602d544804e9789bb74738df4d88eb812 Mon Sep 17 00:00:00 2001 From: "Zsolt Gyulai (zgyulai)" Date: Thu, 18 Jul 2024 15:02:06 +0200 Subject: [PATCH 2/2] Moved flag into the appropriate topic. Signed-off-by: Zsolt Gyulai (zgyulai) --- _includes/doc/admin-guide/options/flags.md | 1 - _includes/doc/admin-guide/options/source-flags.md | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/_includes/doc/admin-guide/options/flags.md b/_includes/doc/admin-guide/options/flags.md index 237b413d..71879550 100644 --- a/_includes/doc/admin-guide/options/flags.md +++ b/_includes/doc/admin-guide/options/flags.md @@ -8,7 +8,6 @@ * `empty-lines`: Use the empty-lines flag to keep the empty lines of the messages. Otherwise, these lines are automatically removed. * `expect-hostname`: When this flag is used syslog-ng OSE expects a log message that contains a hostname and parses the message accordingly. This is the default behavior for TCP sources. Note that pipe sources use the `no-hostname` flag by default. * `guess-timezone`: This flag allows the source to attempt to guess the timezone of the message if this information is not available in the message. Works when the incoming message stream is close to real time, and the timezone information is missing from the timestamp. -* `ignore-aux-data`: This flag enables the source to ignore auxiliary data. * `kernel`: This flag sets the source default to the `LOG_KERN | LOG_NOTICE` priority if not specified otherwise. * `no-header`: This flag triggers syslog-ng OSE to parse only the `PRI` field of incoming messages, and put the rest of the message contents into `MSG`. The functionality of `no-header` is similar to the `no-parse` flag, but the `no-header` flag does not skip the `PRI` field. The `no-header` flag signals syslog-ng OSE that the syslog header is not present (or does not adhere to the conventions / RFCs), so the entire message (except from the `PRI` field) is put into `MSG`. diff --git a/_includes/doc/admin-guide/options/source-flags.md b/_includes/doc/admin-guide/options/source-flags.md index 61dfc2cd..41149ad8 100644 --- a/_includes/doc/admin-guide/options/source-flags.md +++ b/_includes/doc/admin-guide/options/source-flags.md @@ -23,7 +23,7 @@ this information is not available in the message. Works when the incoming message stream is close to real time, and the timezone information is missing from the timestamp. - +- *ignore-aux-data*: This flag enables the source to ignore auxiliary data. - *kernel*: The kernel flag makes the source default to the LOG_KERN | LOG_NOTICE priority if not specified otherwise.