Skip to content
This repository has been archived by the owner on Mar 15, 2022. It is now read-only.

Adds syslog sink support #105

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

DerekHeldtWerle
Copy link

Adds support for a dedicated syslog server sink versus one listening at an http endpoint. Code draws heavy inspiration from the httpSink, with the minimal necessary changes to get it to work with a syslog server.

Signed-off-by: Derek Heldt-Werle [email protected]

Signed-off-by: Derek Heldt-Werle <[email protected]>
@colml
Copy link

colml commented Sep 7, 2020

Good to see this @DerekHeldtWerle.

I wanted to integrate to Fluent Bit which has support for syslog input using in_syslog. However some log events cannot be parsed as syslog.Write() seems to add its own non-RFC5424 headers on top of the existing RFC5424 header written by EventData.WriteRFC5424().

For example if two events are sent together by syslogsink:

<syslog.Write() header> <rfc5424 header> <msg>
<rfc5424 header> <msg>

The second event will be parsed successfully but the first is not due to the double non rfc5424 header. It's possible to update the syslog parsing regex in Fluent Bit parsers to handle this issue, but might be worth investigating if additional header can be skipped.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants