David - I'm sure I could get some time to devote to shepherding this, and I could get some time and resources from our community team to write some articles / tutorials about rsyslog + mmnormalize and generate some publicity for the project. Additionally I have access to a decently large sampling of logs from a reasonably scaled environment for testing.
If this is something people are interested in and the only blocker is time and resources let me talk to a couple of people today and I'll update the list. Cheers, Brian On Wed, Jun 22, 2016 at 7:24 PM David Lang <da...@lang.hm> wrote: > On Wed, 22 Jun 2016, Joe Blow wrote: > > > What about soliciting people to start sharing their mmnormalize rules? > > I've already shared my checkpoint rules, I could see about sharing my > Cisco > > rules as well. I avoid regex engines like the plague (for obvious > > reasons), but would also like to see larger log source parsers adopted > and > > open sourced. > > > > Thoughts? Should we try and start a larger repository for parsing well > > adopted log sources via liblognorm? > > This thought keeps getting raised. Yes this shoudl be done. The problem is > that > nobody has stepped up to organize this. > > We don't want to have 50 different ways to handle the same Cisco message, > but > how do we pick which of the many different versions we are going to use? > > David Lang > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
