On Wed, 22 Jun 2016, Joe Blow wrote:
What about soliciting people to start sharing their mmnormalize rules?
I've already shared my checkpoint rules, I could see about sharing my Cisco
rules as well. I avoid regex engines like the plague (for obvious
reasons), but would also like to see larger log source parsers adopted and
open sourced.
Thoughts? Should we try and start a larger repository for parsing well
adopted log sources via liblognorm?
This thought keeps getting raised. Yes this shoudl be done. The problem is that
nobody has stepped up to organize this.
We don't want to have 50 different ways to handle the same Cisco message, but
how do we pick which of the many different versions we are going to use?
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
