Amit wrote:
Hello,
I find sometimes order of event in openldap logs as:
BIND
RESULT
ACCEPT
SRCH base
SRCH attr=
SEARCH RESULT
closed
Configured rsyslog as:
$template myTemplate,"%timegenerated:::date-rfc3339%
%timereported:::date-rfc3339% %msg%\n"
local4.* /var/log/rsyslog.log;myTemplate
But I believe correct order should be:
Accept
Bind
result
srch base
unbind
closed
What cant be the reason, is it related to openldap logging mechanism or Logger
rsyslog.
Sounds like an rsyslog issue.
--
-- Howard Chu
CTO, Symas Corp.
http://www.symas.com
Director, Highland Sun
http://highlandsun.com/hyc/
Chief Architect, OpenLDAP
http://www.openldap.org/project/