liblognorm

Blog

  • liblognorm 2.0.6 released

    We have just released liblognorm 2.0.6. This release mostly features enhancements and fixes to field type definitions like checkpoint-lea and cisco-interface-spec. Also liblognorm now builds on AIX. See the Changelog for details.

    Version 2.0.6, 2018-11-06

    • implement Checkpoint LEA transfer format
      … at least if we guess right that this is the format name. This
      type of format seems to be seen in syslog message. Checkpoint does
      not provide a spec, so everything is guesswork… 🙁
      closes https://github.com/rsyslog/liblognorm/issues/309
    • made build on AIX
      Thanks to Philippe Duveau for the patch.
    • fixes and improvements in bash scripting
      mostly based on shellcheck recommandations (via CodeFactor.com)
    • string parser: add “lazy” matching mode
      This introduces paramter “matching.lazy”. See doc for details.
    • bugfix: suppress invalid param error for field name “-”
      Suppress invalid param error for name for hexnumber, float, number,
      date-rfc3164 and date-rfc5424. It will just check if name is “-” to
      make sure that we only suppress the error message in case we do not
      want to capture something.
      Thanks to Sol Huebner for the patch.
      closes https://github.com/rsyslog/liblognorm/issues/270
    • bugfix: cisco-interface-spec did not succeed when at end of line
      Thanks to Sol Huebner for the patch.
      closes https://github.com/rsyslog/liblognorm/issues/229

     

    Download:
    http://www.liblognorm.com/download/liblognorm-2-0-6/

    As always, feedback is appreciated.

    Best regards,
    Florian Riedl

  • liblognorm 2.0.6

    Download file name: liblognorm 2.0.6

    liblognorm 2.0.6
    sha256 hash: cff057e85c22038992f9ed12eb8d4e63c45adf53a5a51faaa3279f605809f6f2

    Author: Rainer Gerhards (rgerhards@adiscon.com)
    Version: 2.0.6 File size: 0.667 MB

    Download this file now!

  • liblognorm 2.0.5 released

    We have just released liblognorm 2.0.5. This new version mainly provides a fix so liblognorm can build and work on Solaris systems. See the Changelog for details.

    Version 2.0.5, 2018-04-26

    • bugfix: es_str2cstr leak in string-to v1 parser
      Thanks to Harshvardhan Shrivastava for the patch.
    • make “make check” “succeed” on solaris 10
      actually, we just ignore the CI failures so that OpenCSW can build
      new packages. The problems actually exist on that platform, but
      testing has shown they always existed. We currently run out of time
      to really fixing this, plus we never had any bug report on Solaris
      (I assme nobody uses it on Solaris 10). However, that issues is a
      blocker to make new rsyslog versions available on OpenCSW for
      Solaris 10, so we go the dirty way of pretenting there is no
      problem. Note: the issues was orignally not seen, as the failing
      tests have been added later on. So the problem was always there,
      just not visible.
    • some mostly cosmetic fixes detected by Coverity Scan
      e. g. memory leak if and only if system was completely out of memory

    Download:
    http://www.liblognorm.com/download/liblognorm-2-0-5/

    As always, feedback is appreciated.

    Best regards,
    Florian Riedl

  • liblognorm 2.0.5

    Download file name: liblognorm 2.0.5

    liblognorm 2.0.5
    sha256 hash: c8151da83b21031f088bb2a8ea674e4f7ee58551829e985028245841330db190

    Author: Rainer Gerhards (rgerhards@adiscon.com)
    Version: 2.0.5 File size: 0.667 MB

    Download this file now!

  • liblognorm 2.0.4 released

    We have just released liblognorm 2.0.4. This new version mainly provides new parser support options, like different JSON number formats and unix timestamps. See the Changelog for details.

    Version 2.0.4, 2017-10-04

    • added support for native JSON number formats supported by parsers: number, float, hex
    • added support for creating unix timestamps supported by parsers: date-rfc3164, date-rfc5424
    • fixed build problems on Solaris
      … but there still seem to be some code issues, manifested in testbench failures. So use with care!

    Download:
    http://www.liblognorm.com/download/liblognorm-2-0-4/

    As always, feedback is appreciated.

    Best regards,
    Florian Riedl

  • liblognorm 2.0.4

    Download file name: liblognorm 2.0.4

    liblognorm 2.0.4
    sha256 hash: 730175b6e4e8818c31a60f614f8ba38aae4f8edbeb50d0e34236749e5d20b3a3

    Author: Rainer Gerhards (rgerhards@adiscon.com)
    Version: 2.0.4 File size: 0.665 MB

    Download this file now!

  • liblognorm 2.0.3 released

    We have just released liblognorm 2.0.3. This new version provides some fixes for the the annotate function and adds a test for it. A few different issues have also been fixed. See the Changelog for details.

    Changelog:Version 2.0.3, 2017-03-22

    • add ability to load rulebase from a string
      introduces new API:
      int ln_loadSamplesFromString(ln_ctx ctx, const char *string);
      closes https://github.com/rsyslog/liblognorm/issues/239
    • bugfix: string parser did not correctly parse word at end of line
    • bugfix: literal parser does not always store value if name is specified
      if
      rule=:%{“type”:”literal”, “text”:”a”, “name”:”var”}%
      is used and matching message is provided, variable var ist not persisted.
      see also http://lists.adiscon.net/pipermail/rsyslog/2016-December/043985.html

    Download:
    http://www.liblognorm.com/download/liblognorm-2-0-3/

    As always, feedback is appreciated.

    Best regards,
    Florian Riedl

  • liblognorm 2.0.3

    Download file name: liblognorm 2.0.3

    liblognorm 2.0.3
    sha256 hash: a0c670b1f4ad0cb79dba0a4c16d9c3e8109596b5cdd744990e2924b79fd3dab3

    Author: Rainer Gerhards (rgerhards@adiscon.com)
    Version: 2.0.3 File size: 0.646 MB

    Download this file now!

  • liblognorm 2.0.2 released

    We have just released liblognorm 2.0.2. This new version provides some fixes for the the annotate function and adds a test for it. A few different issues have also been fixed. See the Changelog for details.

    Changelog:
    Version 2.0.2, 2016-11-15

    • bugfix: no error was emitted on invalid “annotate” line
    • “annnotate”: permit inline comments
    • fix a problem with cross-compilation
      see also: https://github.com/rsyslog/liblognorm/pull/221
      Thanks to Luca Boccassi for the patch
    • bugfix: abort in literal path compaction when useing “alternative” parser
      When using the “alternative” parser, literals nodes could be created with
      multiple reference count. This is valid. However, literal path compaction
      did not consider this case, and so “merged” these nodes, which lead to
      pdag corruption and quickly to segfault.
      closes https://github.com/rsyslog/liblognorm/issues/220
      closes https://github.com/rsyslog/liblognorm/issues/153
    • bugfix: lognormalizer could loop
      This also caused the testbench to fail on some platforms.
      due too incorrect data type
      Thanks to Michael Biebl for this fix.
    • fix misleading compiler warning
      Thanks to Michael Biebl for this fix.
    • testbench: add test for “annotate” functionality

    Download:
    http://www.liblognorm.com/download/liblognorm-2-0-2/

    As always, feedback is appreciated.

    Best regards,
    Florian Riedl

  • liblognorm 2.0.2

    Download file name: liblognorm 2.0.2

    liblognorm 2.0.2
    sha256 hash: 1689453feb4fa5343475cc08379d9e3f0f4c767a3669aa6adb553905d14447db

    Author: Rainer Gerhards (rgerhards@adiscon.com)
    Version: 2.0.2 File size: 0.644 MB

    Download this file now!