NetScaler Gateway 12.0 – No Line Breaks On Events When Going Through Syslogs

-per RFC 5424 the syslog follows a structure message, there is no line break/delimiter. RFC 5426 and RFC 6587 (TCP and UDP syslog) also do not specifiy any delimiter


RFC 5424 is followed by the Netscaler and doesn’t mention line breaks/delimiters.

RFC 5426 (https://tools.ietf.org/rfc/rfc5426.txt) specifies :



In case you are using TCP RFC 6587 (https://tools.ietf.org/rfc/rfc6587.txt) specifies:


A typical syslog message goes like this:

<134> 04/11/2016:18:04:49 GMT qa-lb1 0-PPE-0 : default TCP CONN_TERMINATE 244185561 0 : Source 10.230.50.75:9200 – Destination 10.230.53.6:8994 – Start Time 04/11/2016:18:04:49 GMT – End Time 04/11/2016:18:04:49 GMT – Total_bytes_send 124 – Total_bytes_recv 64

<134> is used as the priority value of the message and starts each message since it symbolizes its Header.

Related:

Leave a Reply