Hello.
I have an intention to use zmq system as a message transport layer
for daemons that use syslog logging.
The massage must also be modified before passing into zmq.
Simplified flow:
* 3rd parity old daemon calls syslog("123 Foo Bar")
* rsyslog catches message parse it and produces json message that
get passed to
* zmq output system
I think i have 2 choices:
1) Use syslog daemon and write zmq plugin
I googled a little and found
https://github.com/aggregateknowledge/rsyslog-zeromq
Is it going to be included in rsyslog as official plugin?
Install how-to of this plugin mentioned patching rsyslog and
that worry me a little.
Also in this scenario: how do i make fast message modification?
is it possible to do in output module code?
2) Write my own pseudo-syslog daemon that will receive messages in
syslog format and send changed messages into zmq system.
As i know old legacy format is pretty simple but i dont want to
write my own
syslog format parser conforming to all rfc and broken reality.
Where do i look in rsyslog sources for syslog message parser?
Is it possible by rsyslog licence to use part of rsyslog code? How do
i integrate with my own code? Maybe there are others open source
syslog message parsers?
Any suggestions?
--
--------------------------------------------
Турнаев Евгений Викторович
+7 906 875 09 43
--------------------------------------------
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
