On Wed, 5 Oct 2011, Pablo Chacin wrote:

Hi David
you need the software that creates them to do the formatting
Exactly, question is, is there any? should I do it "by hand" and if so, how?
yes, rsyslog handles RFC5424, you may note that the author of that RFC is the primary author of rsyslog.

I understand that rsyslog handles RFC5424. My question was more about this scenario: if my application uses the standard syslog calls to generate log messages, but the message text is formatted following the RFC5424 specifications (in particular, adding the tags), will this be enough for rsyslog to recognise the format and process it properly?

More over, will this format be a valid message format for the syslog API? will it accept the tags?

rsyslog doesn't process the tags, the message is just one long string, so it doesn't matter what the body of the message is, rsyslog will send it on (or write it out). the only differences at the transport layer are in the header and timestamp, the message itself is not interpreted by rsyslog (unless you do advanced filtering, but even that's string manipulation)

David Lang


Anyone in this list has done this so far and could comment on his/her experience?

Thanks in advance

Pablo

On 10/04/2011 10:30 PM, [email protected] wrote:
On Tue, 4 Oct 2011, Pablo Chacin wrote:

Hi all

Is there a way to generate log data using the RFC 5424 format?

remember that rsyslog transports and outputs log messages, with very few exceptions it doesn't create them. you need the software that creates them to do the formatting

If not, would an standard syslog message on which I add structured data according the RFC 5424
be recognised and processed properly by rsyslog?

yes, rsyslog handles RFC5424, you may note that the author of that RFC is the primary author of rsyslog.

David Lang

Thanks in advance
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to