support for rfc5424 syslog format

Activity

Show:
Laurent
January 7, 2012, 10:59 PM
Edited

thought i would also provide a patch, i guess we can easily add the optional syslog_version field, but that's not enough.
severity and facility look like there are the same but SYSLOGLINE is not rfc5424 ready.

Jordan Sissel
August 21, 2012, 6:51 AM

We are dropping 'plugin'-based syslog parsing support, so adding RFC5424 support probably belongs in the cookbook (cookbook.logstash.net)

Happy to discuss further

Fabrice Bacchella
January 27, 2014, 10:57 PM

I will be very pleased to see an example for the structured data field parsing (http://tools.ietf.org/html/rfc5424#section-6.3) in a cookbook.

Won't Fix

Assignee

Jordan Sissel

Reporter

Laurent

Labels

Configure