GitHub user turcsanyip opened a pull request:
https://github.com/apache/flume/pull/234
FLUME-3133 Add client IP / hostname headers to Syslog sources.
In the newer version of the Syslog message format (RFC-5424) the hostname
is not a mandatory header anymore so the Syslog client might not send it.
On the Flume side it would be a useful information that could be used
in interceptors or for event routing.
To keep this information, two new properties have been added to the Syslog
sources: clientIPHeader and clientHostnameHeader.
Flume users can define custom event header names through these parameters
for storing the IP address / hostname of the Syslog client in the Flume
event as headers.
The IP address / hostname are retrieved from the underlying network sockets,
not from the Syslog message.
This change is based on the patch submitted by Jinjiang Ling which has been
rebased onto the current trunk and the review comments have been
implemented.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/turcsanyip/flume FLUME-3133
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/flume/pull/234.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #234
----
commit ec5af4aaf9cf9884ca6a9d4ef681a5fa4c4155a6
Author: turcsanyi <turcsanyi@...>
Date: 2018-11-08T14:32:59Z
FLUME-3133 Add client IP / hostname headers to Syslog sources.
In the newer version of the Syslog message format (RFC-5424) the hostname
is not a mandatory header anymore so the Syslog client might not send it.
On the Flume side it would be a useful information that could be used
in interceptors or for event routing.
To keep this information, two new properties have been added to the Syslog
sources: clientIPHeader and clientHostnameHeader.
Flume users can define custom event header names through these parameters
for storing the IP address / hostname of the Syslog client in the Flume
event as headers.
The IP address / hostname are retrieved from the underlying network sockets,
not from the Syslog message.
This change is based on the patch submitted by Jinjiang Ling which has been
rebased onto the current trunk and the review comments have been
implemented.
----
---
