On Wed, 5 Oct 2011, Pablo Chacin wrote:
Hi David
you need the software that creates them to do the formatting
Exactly, question is, is there any? should I do it "by hand" and if so, how?
yes, rsyslog handles RFC5424, you may note that the author of that RFC is
the primary author of rsyslog.
I understand that rsyslog handles RFC5424. My question was more about this
scenario: if my application uses the standard syslog calls to generate log
messages, but the message text is formatted following the RFC5424
specifications (in particular, adding the tags), will this be enough for
rsyslog to recognise the format and process it properly?
More over, will this format be a valid message format for the syslog API?
will it accept the tags?
rsyslog doesn't process the tags, the message is just one long string, so
it doesn't matter what the body of the message is, rsyslog will send it
on (or write it out). the only differences at the transport layer are in
the header and timestamp, the message itself is not interpreted by rsyslog
(unless you do advanced filtering, but even that's string manipulation)
David Lang
Anyone in this list has done this so far and could comment on his/her
experience?
Thanks in advance
Pablo
On 10/04/2011 10:30 PM, [email protected] wrote:
On Tue, 4 Oct 2011, Pablo Chacin wrote:
Hi all
Is there a way to generate log data using the RFC 5424 format?
remember that rsyslog transports and outputs log messages, with very few
exceptions it doesn't create them. you need the software that creates them
to do the formatting
If not, would an standard syslog message on which I add structured data
according the RFC 5424
be recognised and processed properly by rsyslog?
yes, rsyslog handles RFC5424, you may note that the author of that RFC is
the primary author of rsyslog.
David Lang
Thanks in advance
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com