nickwallen edited a comment on issue #1279: METRON-1893 Syslog RFC-3164 parser URL: https://github.com/apache/metron/pull/1279#issuecomment-449412462 Actually, I just noticed that the `timestamp` that was appended to the 'good' message in my example above is not epoch millis. Should that be epoch millis? ``` [Stellar]>>> PARSER_PARSE(p, msg) [ { "syslog.header.hostName": "10.22.8.216", "original_string": "<167>Jan 5 08:52:35 10.22.8.216 %ASA-7-609001: Built local-host inside:10.22.8.205", "syslog.header.facility": "20", "guid": "f9201e92-4c35-4391-95a4-e1d0cd54cdd7", "syslog.header.timestamp": "Jan 5 08:52:35", "syslog.message": "%ASA-7-609001: Built local-host inside:10.22.8.205", "syslog.header.pri": "167", "syslog.header.severity": "7", "timestamp": "Jan 5 08:52:35", "source.type": "syslog" } ] ```
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
