[logback-user] SyslogAppender behaving strangely
Chris Pratt
thechrispratt at gmail.com
Fri Jun 7 03:38:47 CEST 2013
How about just removing the %d parameter (since syslogd already timestamps
each entry) and seeing if the problem moves or goes away.
(*Chris*)
On Thu, Jun 6, 2013 at 5:13 PM, Robert Kuhar <robertkuhar at gmail.com> wrote:
> I too am suspicious of the OS X syslogd, but I really don't know how to
> trouble shoot it. Maybe I sniff the wire to see what the UDP packets look
> like? That seems rather primitive. I just wondered if anyone else has
> ever seen this apparent message corruption when using a SyslogAppender.
>
> THanks,
> Bob
>
>
> On Thu, Jun 6, 2013 at 4:03 PM, Chris Pratt <thechrispratt at gmail.com>wrote:
>
>> It looks to me like the first timestamp and the bobk-mbp.local are being
>> output by the SysLog daemon, but I have no idea what would be inserting the
>> <Info> in the center of the timestamp from Logback. Could your SysLog
>> daemon be automatically inserting the log level at the first colon in the
>> message?
>> (*Chris*)
>>
>>
>> On Thu, Jun 6, 2013 at 3:24 PM, Robert Kuhar <robertkuhar at gmail.com>wrote:
>>
>>> My SyslogAppender succeeds in sending messages to the syslogd on my
>>> MacBook, but the messages themselves are "corrupt" the syslogd logs them.
>>> For example, a RollingFileAppender
>>>
>>> <appender name="DAILY_ROLLING"
>>> class="ch.qos.logback.core.rolling.RollingFileAppender">
>>> <File>logs/dm.log</File>
>>> <rollingPolicy
>>> class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
>>> <FileNamePattern>logs/dm.%d{yyyyMMdd}.log</FileNamePattern>
>>> </rollingPolicy>
>>> <encoder>
>>> <pattern>%d{yyyy-MM-dd'T'HH:mm:ss.SSS} [%p] %c{2}
>>> DSN:%X{X-HTC-DEVICE-SN} APV:%X{X-HTC-APP-VERSION} RID:%X{X-HTC-REQUEST-ID}
>>> - %m%n</pattern>
>>> </encoder>
>>> </appender>
>>>
>>> logs a message like...
>>>
>>> 2013-06-06T15:02:17.129 [INFO] Global$ DSN: APV: RID: - dm2-server
>>> starting
>>>
>>> But the SysLog appender dorks the message corrupting the %d timestamp
>>> and duplicating the level. My SyslogAppender is configured like...
>>>
>>> <appender name="SYSLOG"
>>> class="ch.qos.logback.classic.net.SyslogAppender">
>>> <syslogHost>localhost</syslogHost>
>>> <facility>local4</facility>
>>> <suffixPattern>%d{yyyy-MM-dd'T'HH:mm:ss.SSS} %p %c{2}
>>> DSN:%X{X-HTC-DEVICE-SN} APV:%X{X-HTC-APP-VERSION} RID:%X{X-HTC-REQUEST-ID}
>>> - %m</suffixPattern>
>>> </appender>
>>>
>>> With the same log message appearing like...
>>>
>>> Jun 6 15:02:17 bobk-mbp.local 2013-06-06T15 <Info>: 02:17.129 INFO
>>> Global$ DSN: APV: RID: - dm2-server starting
>>>
>>> Where did the <Info> come from and what is it doing in the middle of
>>> logback's %d timestamp? Is this logback messing up or syslogd? Any
>>> recommendations on how to troubleshoot this?
>>>
>>> Bob
>>>
>>>
>>>
>>> _______________________________________________
>>> Logback-user mailing list
>>> Logback-user at qos.ch
>>> http://mailman.qos.ch/mailman/listinfo/logback-user
>>>
>>
>>
>> _______________________________________________
>> Logback-user mailing list
>> Logback-user at qos.ch
>> http://mailman.qos.ch/mailman/listinfo/logback-user
>>
>
>
> _______________________________________________
> Logback-user mailing list
> Logback-user at qos.ch
> http://mailman.qos.ch/mailman/listinfo/logback-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.qos.ch/pipermail/logback-user/attachments/20130606/e6bcca38/attachment.html>
More information about the Logback-user
mailing list