It doesn't look from just reading the RFC as if it would be that hard to
distinguish
Between :
<34>Oct 11 22:14:15 mymachine su: 'su root' failed for lonvick on /dev/pts/8
<34>1 2003-10-11T22:14:15.003Z mymachine.example.com su - ID47 - BOM'su root'
failed for lonvick on /dev/pts/8
The latter being 5424 format..
As well as :
<165>Aug 24 05:34:00 CST 1987 mymachine myproc[10]: %% It's
time to make the do-nuts. %% Ingredients: Mix=OK, Jelly=OK #
Devices: Mixer=OK, Jelly_Injector=OK, Frier=OK # Transport:
Conveyer1=OK, Conveyer2=OK # %%
<165>1 2003-10-11T22:14:15.003Z mymachine.example.com
evntslog - ID47 [exampleSDID@32473 iut="3" eventSource=
"Application" eventID="1011"] BOMAn application
event log entry…
I.e :
<165>1 looks like enough to at least make a guesstimate?
/je
On Nov 22, 2011, at 11:50 PM, Willem Jiang wrote:
> Hi,
>
> I'm not sure if the RFC 5424 has back ward compatibility to RFC 3164.
> If it is we could keep the component name with camel-syslog, otherwise would
> move on to call it camel-syslog2.
>
> I just have a quick look at the syslog4j license, it is using GPL which means
> we cannot host this component in Apache repo. But we have the camel-extra
> project[1] which can host this kind of components.
>
> [1]https://code.google.com/a/apache-extras.org/p/camel-extra/
>
> On Wed Nov 23 11:11:12 2011, geemang wrote:
>> The current syslog is using an outdated RFC 3164. Since, I'm in need of a
>> syslog RFC 5424 component I've created one that current wraps syslog4j for
>> the marshalling, the rest I can pretty much copy and extend the existing
>> syslog implementation.
>>
>> Questions
>> 1) I'm open to contributing this, do you guys want this if it uses syslog4j
>> under the covers?
>> 2) If so, what should it be called? syslog2?
>>
>> Cheers,
>> Martin
>>
>>
>> --
>> View this message in context:
>> http://camel.465427.n5.nabble.com/syslog-RFC-5424-dataformat-component-tp5015386p5015386.html
>> Sent from the Camel Development mailing list archive at Nabble.com.
>>
>
>
> --
> Willem
> ----------------------------------
> FuseSource
> Web: http://www.fusesource.com
> Blog: http://willemjiang.blogspot.com (English)
> http://jnn.javaeye.com (Chinese)
> Twitter: willemjiang
> Weibo: willemjiang
