Removing Added Header Information from Logs (4232056)

Step 1 - Edit the syslog-ng.conf file using a text editor

Step 2 - In the syslog-ng.conf make the following change(s):

Add the following syntax to each source() option of the syslog-ng.conf file:

flags(no-parse)

See the following example:

source s_example_source {
   network( 
       ip("0.0.0.0")
       port(6601)
       transport("tcp")
       flags(no-parse)
    );
};

Step 3 - Add the following syntax to each desired destination() option where the change is to be made:

template("${MESSAGE}\n")

See the following example:

destination d_example_destination {
        syslog(
                "192.168.1.105"
                port(6601)
                transport(tcp)
		template("${MESSAGE}\n")
        );
};

Step 4 - Save the changes made to the syslog-ng.conf file and restart the Syslog-ng PE service to apply the changes. The header from the logs should now be removed leaving the message of the log for viewing.