rewrite or parser??

[lorenzo75]

Hi all,
i've installed syslog-ng as suggeted me in topic "modify string of syslog server" in syslogd forum.
Waiting for "admin" posts the istructions, i'm trying to do that on my own
My problem is delete informations that syslog server put at the beginning of a record recieved from a squid server.
What is better to do that?
should I use "rewrite" or "parser"?

thanks a lot in advance for any help

lorenzo

[Admin]

Sorry for the delay.  You want to use a template.  Try using a destination() like this:

destination d_squid{ file("/var/log/squid.log" template("$MSG\n")); };

This will discard the old header and only use the syslog-ng header.  

[lorenzo75]

Do not warry for delay
sometimes I like to try find out solutions 

anyway thanks a lot for the post...i'll test right now

[lorenzo75]

great... it works
thanks a lot


Lorenzo