Unfortunately, rsyslog is one of the syslog collectors that don't like the output of Sys::Syslog.

In the end, we've decided to abandon Sys::Syslog and write some custom code that implements as much of RFC5424 as we need. We hope for better success with that, partly because we'll have more control over the code, and partly because we'll be implementing the current RFC, rather than RFC3164, which is what Sys::Syslog implements, and which has been obsolete for six years.

To everyone on this thread: many thanks for your help and suggestions.

In reply to Re^4: Sys::Syslog skips the first event by MarkusLaker
in thread Sys::Syslog skips the first event by MarkusLaker

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.