#! /bin/sh -e

PROGRAM=lr_desyslog
id=${LR_ID:-UNSET}
tag="all all $PROGRAM $id"

if test $# -ne 1 
then
    echo >&2 "$tag err please give 1 arg, indicating program"
    exit 1
fi

LR_SERVICE="$1"

while read month day time host service rest
do
    if test "X$service" = "X${LR_SERVICE}:"
    then
	echo "$rest"
    else
	echo >&2 "$tag info skipping '$rest': '$service' is not '$LR_SERVICE:'"
    fi
done

exit 0

POD=<<'EOPOD'

=pod

=head1 NAME

lr_desyslog - strip syslog style header from logfile line

=head1 SYNOPSIS

B<lr_desyslog> I<program>

=head1 DESCRIPTION

lr_desyslog removes a syslog style timestamp, hostname, and I<program>, and
prints the remaining stuff given on stdin to stdout. E.g, when invoked as
lr_desyslog qmail, it throws away things like 'Oct 29 10:07:44 gelfand qmail:',
and keeps '972810464.240168 end msg 6161'. This is useful when processing
qmail logs, which are processed by splogger.

=head1 TODO

Handle pid's in program syslog tag.

=head1 VERSION

$Id: lr_desyslog.in,v 1.2 2006/07/23 13:16:32 vanbaal Exp $

=head1 COPYRIGHT

Copyright (C) 2000, 2001 Stichting LogReport Foundation LogReport@LogReport.org

This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.

=head1 AUTHOR

Joost van Baal <joostvb@logreport.org>

=cut

EOPOD