camel-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Johan Edstrom <seij...@gmail.com>
Subject Re: syslog RFC 5424 dataformat component
Date Wed, 23 Nov 2011 17:49:07 GMT
It doesn't look from just reading the RFC as if it would be that hard to distinguish 

Between : 

<34>Oct 11 22:14:15 mymachine su: 'su root' failed for lonvick on /dev/pts/8
<34>1 2003-10-11T22:14:15.003Z mymachine.example.com su - ID47 - BOM'su root' failed
for lonvick on /dev/pts/8

The latter being 5424 format..

As well as :


<165>Aug 24 05:34:00 CST 1987 mymachine myproc[10]: %% It's
         time to make the do-nuts.  %%  Ingredients: Mix=OK, Jelly=OK #
         Devices: Mixer=OK, Jelly_Injector=OK, Frier=OK # Transport:
         Conveyer1=OK, Conveyer2=OK # %%

<165>1 2003-10-11T22:14:15.003Z mymachine.example.com
           evntslog - ID47 [exampleSDID@32473 iut="3" eventSource=
           "Application" eventID="1011"] BOMAn application
           event log entry…


I.e : 

<165>1 looks like enough to at least make a guesstimate?

/je

On Nov 22, 2011, at 11:50 PM, Willem Jiang wrote:

> Hi,
> 
> I'm not sure if the RFC 5424 has back ward compatibility to RFC 3164.
> If it is we could keep the component name with camel-syslog, otherwise would move on
to call it camel-syslog2.
> 
> I just have a quick look at the syslog4j license, it is using GPL which means we cannot
host this component in Apache repo. But we have the camel-extra project[1] which can host
this kind of components.
> 
> [1]https://code.google.com/a/apache-extras.org/p/camel-extra/
> 
> On Wed Nov 23 11:11:12 2011, geemang wrote:
>>  The current syslog is using an outdated RFC 3164.  Since, I'm in need of a
>> syslog RFC 5424 component I've created one that current wraps syslog4j for
>> the marshalling, the rest I can pretty much copy and extend the existing
>> syslog implementation.
>> 
>> Questions
>> 1) I'm open to contributing this, do you guys want this if it uses syslog4j
>> under the covers?
>> 2) If so, what should it be called? syslog2?
>> 
>> Cheers,
>> Martin
>> 
>> 
>> --
>> View this message in context: http://camel.465427.n5.nabble.com/syslog-RFC-5424-dataformat-component-tp5015386p5015386.html
>> Sent from the Camel Development mailing list archive at Nabble.com.
>> 
> 
> 
> -- 
> Willem
> ----------------------------------
> FuseSource
> Web: http://www.fusesource.com
> Blog:    http://willemjiang.blogspot.com (English)
>         http://jnn.javaeye.com (Chinese)
> Twitter: willemjiang
> Weibo: willemjiang


Mime
View raw message