A question for those who are familiar with the Logging/Syslog functions in boost. I am currently experimenting with boost 1_57_0. Compiling with MSVC++ 12.0 I am using the example for syslog https://github.com/boostorg/log/blob/master/example/syslog/main.cpp Relevant Example Code Snippet sink->set_formatter ( expr::format("syslog.exe: %1%: %2%") % expr::attr< unsigned int >("RecordID") % expr::smessage ); // We'll have to map our custom levels to the syslog levels sinks::syslog::custom_severity_mapping< severity_levels > mapping("Severity"); mapping[normal] = sinks::syslog::info; mapping[warning] = sinks::syslog::warning; mapping[error] = sinks::syslog::critical; sink->locked_backend()->set_severity_mapper(mapping); // Set the remote address to sent syslog messages to sink->locked_backend()->set_target_address("localhost"); // Add the sink to the core logging::core::get()->add_sink(sink); // Add some attributes too logging::core::get()->add_global_attribute("RecordID", attrs::counter< unsigned int >()); // Do some logging src::severity_logger< severity_levels > lg(keywords::severity = normal); BOOST_LOG_SEV(lg, normal) << "A syslog record with normal level"; BOOST_LOG_SEV(lg, warning) << "A syslog record with warning level"; BOOST_LOG_SEV(lg, error) << "A syslog record with error level"; For some reason the Timestamp and Source machine name is being added to the start of Message field. So the syslog message field looks something like this: Mar 10 23:23:47 pluto syslog.exe: 0: A syslog record with normal level When I would expect the message field to look like this: syslog.exe: 0: A syslog record with normal level I have tested with both Kiwi Syslog and Syslog Watcher software for Windows on different PC’s running different OS’s and both behave in the same way. All other devices that log to the Syslog server correctly format the message field. Is there a hidden attribute (source machine name and timestamp) that I am not aware of that is being added to the message text? Is the Syslog server software perhaps receiving what it considers to be an incorrectly formatted message and is therefore corrupting the message field? Any suggestions / thoughts on what to check would be appreciated. Mike