Hello,
I’ve been a long time personal user of LibreNMS and am now utilizing it within a domain. The system is working beautifully except for SysLog reporting. I’m receiving event logs but the format they are in isn’t very readable. Here’s an example of what I see.
Is this normal? Is this how LibreNMS is supposed to display SysLogs? If so, that’s not very useful for me. Is there a way to change how events are displayed on the page?
Format wise there’s not much you can do, it’s really what the device is sending,
Regarding the \011 \015 etc, I believe these are called “control characters” and can be filtered within rsyslog or syslog-ng.
I found an article here on them and how you could potentially filter them
rsyslog:
https://www.rsyslog.com/doc/rsconf1_escapecontrolcharactersonreceive.html
Thanks, looking at the Tech Document for syslog-ng it appears this may be to simply filter specific log entries from specific servers and not necessarily to format the way they are displayed within LibreNMS. I’ll keep digging.
ok, so I added these two lines to “/etc/syslog-ng/syslog-ng.conf”
filter f_carriage_return {match("\x0d" value (“MESSAGE”));};
filter f_horizontal_tab {match("\x09" value (“MESSAGE”));};
I restarted the syslog-ng service, “service syslog-ng restart”
I’m not seeing any change in log output within LibreNMS.
Thoughts?
