You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Otto Fowler (JIRA)" <ji...@apache.org> on 2018/06/20 18:26:00 UTC

[jira] [Created] (NIFI-5325) Need a Syslog Parser that fully supports the 5424 Spec

Otto Fowler created NIFI-5325:
---------------------------------

             Summary: Need a Syslog Parser that fully supports the 5424 Spec
                 Key: NIFI-5325
                 URL: https://issues.apache.org/jira/browse/NIFI-5325
             Project: Apache NiFi
          Issue Type: New Feature
            Reporter: Otto Fowler
            Assignee: Otto Fowler


from NIFI-5139

"The Structured Data as described in [https://tools.ietf.org/html/rfc5424#section-6.3] are not read by Nifi.

 

I suggest the SD to be put in attributes, prefixed by the ID:
[exampleSDID@32473 iut="3" eventSource="Application" eventID="1011"]
to become 3 attributes
 * exampleSID@32473-iut = 3
 * exampleSID@32473-eventSource=Application
 * exampleSID@32473-eventID=1011

 

This could be useful to preprocess RFC5424 message, prioritize or route them."

 

Nifi should a have a parser to fully support the spec and structured data.

Since integrating it, and special casing the existing parser would simnifically complicate that processor and move it from it's least common denominator goal, it should be a new parser

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)