Joey Echeverria created FLUME-1172:
--------------------------------------
Summary: The SyslogTcpSource doesn't support RFC 6587 syslog
messages
Key: FLUME-1172
URL: https://issues.apache.org/jira/browse/FLUME-1172
Project: Flume
Issue Type: Bug
Components: Sinks+Sources
Affects Versions: v1.1.0
Reporter: Joey Echeverria
RFC 6587 (http://www.faqs.org/rfcs/rfc6587.html) defines a format for syslog
message over TCP which is roughly:
{noformat}
<message length><sp><syslog message>
{noformat}
Where <message length> is the length, in bytes, of the syslog message to follow
sent as ascii digits, <sp> is a literal space and <syslog message> is a normal
syslog message starting with the priority. We should fix the parser to detect
and support this format. An example message coming in could look something like
this:
{noformat}
382 <14>1 2012-05-02T10:48:34.792-0700 myhost - - - my syslog message...
{noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
