On Wed, Jun 22, 2016 at 7:24 PM, David Lang <[email protected]> wrote: > On Wed, 22 Jun 2016, Joe Blow wrote: > > What about soliciting people to start sharing their mmnormalize rules? >> I've already shared my checkpoint rules, I could see about sharing my >> Cisco >> rules as well. I avoid regex engines like the plague (for obvious >> reasons), but would also like to see larger log source parsers adopted and >> open sourced. >> >> Thoughts? Should we try and start a larger repository for parsing well >> adopted log sources via liblognorm? >> > > This thought keeps getting raised. Yes this shoudl be done. The problem is > that nobody has stepped up to organize this. > > We don't want to have 50 different ways to handle the same Cisco message, > but how do we pick which of the many different versions we are going to use?
We are starting a project to collect common ways to handle and process data from different sources over at https://github.com/viaq/. It is in its infancy, so lots of work to be done. -peter > > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
