syslog-ng windows agent question

"Patrick Hull" <[email protected]> Tue, 21 Oct 2008 15:05:33 -0500
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
We are evaluating some options/products for sending Windows event and
other logs to our
syslog-ng servers.  When running the Windows syslog-ng agent, we are
seeing 2 issues:
- Multiple events per line are being generated from the windows agent,
lines are terminated,
  and continued on the next line.  We would like to see one event per line.
- We are seeing most lines contain a chunk of HEX characters
(<EF><BB><BF>) that are
   aparently UTF-8 byte order marks.

Has anyone experienced this with logs generated from the syslog-ng
windows agent, and is
there a way to filter these out?  We are running a pretty old
syslog-ng (1.6.7) on our collector,
so perhaps this might be the issue?

Any ideas would be welcome...

thanks!
-pat.