Version 8.3.4 [v8-devel] 2014-07-11 new pmciscoios parser supporting various Cisco IOS formats RFC3164 timestamp parser now accepts timezones and subsecond resolution … at least for some common formats and where we could do so without running risk of breaking proper formats (or introducing regressions) new parser config object — permits to define custom parser definitions […]
Log normalization and the leading space
Log normalization is simple, but has its quirks. A common pitfall is syslog message format as induced by RFC3164. Let’s look at a common case: A log message has been sent to rsyslog. The message itself had no irregular characters. But, the message that should have been parsed by mmnormalize now has a leading space […]