Return
-
Title
Error processing log message - Max length of STRUCTURED-DATA field name -
Description
IETF-syslog messages cannot be parsed.
Syslog-ng generates "Error processing log message (at position X):".
-
Cause
The max length of the STRUCTURED-DATA (SDATA) field name is 32 characters defined in RFC 5424.
SD-NAME = 1*32PRINTUSASCII except =, SPACE, ], " -
Resolution
The generated syslog-ng error message shows the position of the too long SDATA name. (at position X)
Find the incorrect SDATA field and change it by using rewrite rule and template.