You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@flume.apache.org by "Hari Shreedharan (JIRA)" <ji...@apache.org> on 2012/07/04 05:02:35 UTC
[jira] [Commented] (FLUME-1277) Error parsing Syslog rfc 3164
messages with null values
[ https://issues.apache.org/jira/browse/FLUME-1277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13406249#comment-13406249 ]
Hari Shreedharan commented on FLUME-1277:
-----------------------------------------
Brent,
Thanks for the patch. Could you please post this on reviewboard(https://reviews.apache.org - add yourself to the Flume group and post the review to that group too) so that committers can review it easily?
Also: I am assigning this bug to you, since you already worked on it. If you think this patch does not fix the issue and if you no longer want to work on it, please let me know.
> Error parsing Syslog rfc 3164 messages with null values
> -------------------------------------------------------
>
> Key: FLUME-1277
> URL: https://issues.apache.org/jira/browse/FLUME-1277
> Project: Flume
> Issue Type: Bug
> Components: Sinks+Sources
> Affects Versions: v1.1.0, v1.2.0
> Reporter: Brent Halsey
> Priority: Minor
> Attachments: FLUME-1277-fix.patch, FLUME-1277-test.patch
>
>
> The SyslogUtils class doesn't properly parse rfc 3164 style messages containing a null (hyphen) value. e.g.,
> <10>Apr 1 13:14:04 ubuntu-11.cloudera.com - rest_of_message
> It tries to parse it as a 5424 style message, skips over the date information, and interprets the first hyphen as a null timestamp. Part of the problem is the use of a Scanner and regex. This skips over a properly formatted 3164 style message until it finds anything that matches the 5424 regex, including a hyphen.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira