-
Bug
-
Resolution: Obsolete
-
Major
-
None
-
None
-
None
-
False
-
-
False
-
-
-
-
-
Hi
I try to send log from JBOSS to RSYSLOG, but in each line this character <feff> appeared.
2022-11-08 10:39:29.481 servername <feff>INFO [undertow] WFLYUT0018: Host default-host starting
I try to enable debug on RSYSLOG server and see in %msg% field this character exist.
here is the debug log:
Debug line with all properties: FROMHOST: '192.168.1.1', fromhost-ip: '192.168.1.1', HOSTNAME: 'servername', PRI: 190, syslogtag 'jboss[3382916]', programname: 'jboss', APP-NAME: 'jboss', PROCID: '3382916', MSGID: 'APP', TIMESTAMP: 'Oct 16 13:27:10', STRUCTURED-DATA: '-', msg: '<feff>2022-10-16 13:27:10,005 INFO [APP] LoggedInUserCount[0]' escaped msg: '<feff>2022-10-16 13:27:10,005 INFO [APP] LoggedInUserCount[0]' inputname: imudp rawmsg: '<190>1 2022-10-16T13:27:10.005+03:30 servername jboss 3382916 APP- <feff>2022-10-16 13:27:10,005 INFO [APP] LoggedInUserCount[0]' $!: $.: $/:
here is JBOSS RSYSLOG handler:
<syslog-handler name="syslog-app">
<level name="ALL"/>
<server-address value="192.168.1.1"/>
<hostname value="servername"/>
<app-name value="APP"/>
<formatter>
<syslog-format syslog-type="RFC5424"/>
<named-formatter name="syslog"/>
</formatter>
<facility value="local-use-1"/>
here is the JBOSS RSYSLOG pattern:
<formatter name="syslog">
<pattern-formatter pattern="%-5p %X{source} [%c{1}] %s%E%n"/>
</formatter>
OS:RHEL 7
RSYSLOG: 8.2210.0
JBOSS: 7.4
any idea?
Thanks
