Forum Discussion
Jessie_O__45052
Mar 28, 2012Historic F5 Account
Classical syslog (RFC3164) expects one message per UDP packet with
no terminating newline. Many servers also support TCP transport and
expect the messages to be separated by newlines, but there is no formal
standard for this -- even the later RFC5424 does not define how messages
should be separated when encapsulated in protocols other than UDP.
Your iRule is not providing a separator, so message separation is essentially being left up to server intelligence and luck. If you add a "\n" to the end of your string, your problems should go away :).
It would be possible to make HSL::send "smart" enough to automagically append a newline when logging to a TCP destination and add a -nonewline flag for users who really do want a "raw" send so they can use arbitrary separators. OTOH, any time you make something "smart", you also make it more confusing.