filter-syslog 2.2

This release adds support for a few additional rsyslogd output formats. We're experimenting with different formats that give us saner dates, but that required both changes to filter-syslog to understand them and a tightening of some of the regexes to match the traditional format so that it doesn't misinterpret the other formats.

The new formats added are rsyslogd's FileFormat and SyslogProtocol23Format default templates.

This new support underscores what turned out to be the best architectural design of filter-syslog: the separation of basic format parsing from the rules. Because filter-syslog separates out the program name and log line, I can add support for new formats without changing any rules. I wasn't thinking about that at the time, but it turned out to be very important.

You can get the latest version from the filter-syslog distribution page.

Posted: 2012-05-12 18:54 — Why no comments?

Last spun 2013-07-01 from thread modified 2013-01-04