Hi Peter, This is looking really good!
Minor things I noticed: - The timestamp attribute. We’ve been using ‘stamp’ as the name for that type of attribute. - The type and level attribute values are currently title cased, but I personally prefer lowercase values since that is what is commonly used. It looks like those were made to match directly with syslog? There are several places where strict element ordering is mandated. Any particular reason why? -Lance
signature.asc
Description: Message signed with OpenPGP using GPGMail
