All as a newbie to rsyslog I think this is a great idea and would find a marketplace for rulebases and examples very beneficial.
On Thu, Jun 23, 2016 at 7:06 AM, Brian Knox <bk...@digitalocean.com> wrote: > David - I'm sure I could get some time to devote to shepherding this, and I > could get some time and resources from our community team to write some > articles / tutorials about rsyslog + mmnormalize and generate some > publicity for the project. Additionally I have access to a decently large > sampling of logs from a reasonably scaled environment for testing. > > If this is something people are interested in and the only blocker is time > and resources let me talk to a couple of people today and I'll update the > list. > > Cheers, > Brian > > On Wed, Jun 22, 2016 at 7:24 PM David Lang <da...@lang.hm> wrote: > > > On Wed, 22 Jun 2016, Joe Blow wrote: > > > > > What about soliciting people to start sharing their mmnormalize rules? > > > I've already shared my checkpoint rules, I could see about sharing my > > Cisco > > > rules as well. I avoid regex engines like the plague (for obvious > > > reasons), but would also like to see larger log source parsers adopted > > and > > > open sourced. > > > > > > Thoughts? Should we try and start a larger repository for parsing well > > > adopted log sources via liblognorm? > > > > This thought keeps getting raised. Yes this shoudl be done. The problem > is > > that > > nobody has stepped up to organize this. > > > > We don't want to have 50 different ways to handle the same Cisco message, > > but > > how do we pick which of the many different versions we are going to use? > > > > David Lang > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
