Re: Request for Comment on new Syslog 5424 Parsing library

2018-05-18 Thread Casey Stella
Cool! I'd welcome a syslog parser! On Fri, May 18, 2018 at 10:02 AM Otto Fowler wrote: > There have been some issues and talk about they way we parse syslog, and > the deficiencies of our grok and regex based approaches, mainly not > supporting structured data as I recall. > I played around wit

Request for Comment on new Syslog 5424 Parsing library

2018-05-18 Thread Otto Fowler
There have been some issues and talk about they way we parse syslog, and the deficiencies of our grok and regex based approaches, mainly not supporting structured data as I recall. I played around with it some and decided to try to write an Antlr grammar based on the RFC 5424 spec BNF to parse vali