Amit wrote:
Hello, I find sometimes order of event in openldap logs as: BIND RESULT ACCEPT SRCH base SRCH attr= SEARCH RESULT closed Configured rsyslog as:$template myTemplate,"%timegenerated:::date-rfc3339% %timereported:::date-rfc3339% %msg%\n"local4.* /var/log/rsyslog.log;myTemplate But I believe correct order should be: Accept Bind result srch base unbind closedWhat cant be the reason, is it related to openldap logging mechanism or Logger rsyslog.
Sounds like an rsyslog issue. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/