/usr/bin/lr_desyslog is in lire 2:2.1.1-2.1.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 | #! /bin/sh -e
PROGRAM=lr_desyslog
id=${LR_ID:-UNSET}
tag="all all $PROGRAM $id"
if test $# -ne 1
then
echo >&2 "$tag err please give 1 arg, indicating program"
exit 1
fi
LR_SERVICE="$1"
while read month day time host service rest
do
if test "X$service" = "X${LR_SERVICE}:"
then
echo "$rest"
else
echo >&2 "$tag info skipping '$rest': '$service' is not '$LR_SERVICE:'"
fi
done
exit 0
POD=<<'EOPOD'
=pod
=head1 NAME
lr_desyslog - strip syslog style header from logfile line
=head1 SYNOPSIS
B<lr_desyslog> I<program>
=head1 DESCRIPTION
lr_desyslog removes a syslog style timestamp, hostname, and I<program>, and
prints the remaining stuff given on stdin to stdout. E.g, when invoked as
lr_desyslog qmail, it throws away things like 'Oct 29 10:07:44 gelfand qmail:',
and keeps '972810464.240168 end msg 6161'. This is useful when processing
qmail logs, which are processed by splogger.
=head1 TODO
Handle pid's in program syslog tag.
=head1 VERSION
$Id: lr_desyslog.in,v 1.2 2006/07/23 13:16:32 vanbaal Exp $
=head1 COPYRIGHT
Copyright (C) 2000, 2001 Stichting LogReport Foundation LogReport@LogReport.org
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.
=head1 AUTHOR
Joost van Baal <joostvb@logreport.org>
=cut
EOPOD
|