[
https://issues.apache.org/jira/browse/FLUME-1277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13406249#comment-13406249
]
Hari Shreedharan commented on FLUME-1277:
-----------------------------------------
Brent,
Thanks for the patch. Could you please post this on
reviewboard(https://reviews.apache.org - add yourself to the Flume group and
post the review to that group too) so that committers can review it easily?
Also: I am assigning this bug to you, since you already worked on it. If you
think this patch does not fix the issue and if you no longer want to work on
it, please let me know.
> Error parsing Syslog rfc 3164 messages with null values
> -------------------------------------------------------
>
> Key: FLUME-1277
> URL: https://issues.apache.org/jira/browse/FLUME-1277
> Project: Flume
> Issue Type: Bug
> Components: Sinks+Sources
> Affects Versions: v1.1.0, v1.2.0
> Reporter: Brent Halsey
> Priority: Minor
> Attachments: FLUME-1277-fix.patch, FLUME-1277-test.patch
>
>
> The SyslogUtils class doesn't properly parse rfc 3164 style messages
> containing a null (hyphen) value. e.g.,
> <10>Apr 1 13:14:04 ubuntu-11.cloudera.com - rest_of_message
> It tries to parse it as a 5424 style message, skips over the date
> information, and interprets the first hyphen as a null timestamp. Part of
> the problem is the use of a Scanner and regex. This skips over a properly
> formatted 3164 style message until it finds anything that matches the 5424
> regex, including a hyphen.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
