Brad Fritz
0630d51ac1
[syslog5424] do not capture chevrons with priority value
...
Priority is "191", not "<191>". The syslog_pri filter expects a
raw integer without the extra punctuation.
2013-08-24 11:35:51 -04:00
Brad Fritz
4b345671ff
[syslog5424] non-capturing parens since no backreferences needed
2013-08-23 14:34:47 -04:00
Brad Fritz
93990829f2
[syslog5424] structured data should be nil when RFC NILVALUE is used
2013-08-23 14:34:41 -04:00
Alexander Papaspyrou
e70c2d0ced
And another one :-( Working in the eve is a **bad** idea.
2013-03-22 20:11:53 +01:00
Alexander Papaspyrou
d9b4b05f83
Meh. Forgot one variable...
2013-03-22 20:08:05 +01:00
Alexander Papaspyrou
c0937c5cb3
Changes wrt. @jordansissel's comments on [my pull request]( https://github.com/logstash/logstash/pull/415 ).
2013-03-22 20:04:15 +01:00
Alexander Papaspyrou
e332f52c48
Added support for IETF 5425 syslog parsing in grok.
2013-03-22 18:30:14 +01:00
Jordan Sissel
65a115fee6
- Add support for iso8601 timestamps in syslog messages
2010-11-09 10:22:25 +00:00
Pete Fritchman
27204e825b
- remove some debugging cruft
...
- remove sample agent.redhat.rb; sample config is the same thing
- indexers now broadcast to each other and build up a directory
- indexers respond to a directory request and provide a list of indexers
- move some errors/usage messages to $stderr
- refactor search.rb to query all available indexers
2009-10-18 23:38:35 +00:00
Jordan Sissel
3b8a9416b6
- Add cron patterns to linux-syslog
2009-09-19 10:06:49 +00:00
Pete Fritchman
40f830d85a
- capture pid in SYSLOGPROG
...
- add some linux-syslog patterns
- sample config for linux-syslog
2009-08-10 02:13:05 +00:00
