Video Screencast Help
As we strive to continually improve your experience on our site, please help us by taking this survey and tell us about your satisfaction level using Symantec Connect. One lucky winner will receive 500 Connect points! * Take the survey.

update to Syslog header format in SEP

Created: 31 Mar 2010
Darren MacKenzie's picture
0 Agree
0 Disagree
0 0 Votes
Login to vote

Here is an example of the log from MR5’s update (the system I just patched to test it for this case):
<54>Mar 10 13:58:36 SymantecServer w2k3ee2: Site: My Site,Server: w2k3ee2,Cleaned up 1 LiveUpdate downloaded content
So the problem is that it is now using Facility/Date/"SymantecServer"/hostname where it is SUPPOSED to be sending log format as Facility/Date/hostname/"SymantecServer"
Note the location of the name "SymantecServer".  It should come AFTER the hostname in the syslog header, not before it.