liblognorm

Fast and flexible log normalization library

liblognorm

Fast and flexible log normalization library

liblognorm 0.3.4 released

We have just released liblognorm 0.3.4. This is a bug fixing release, targeting a single bug that prevented building on many platforms. Changes: Version 0.3.4 (rgerhards), 2012-04-16 bugfix: normalizer tool had a memory leak Thanks to Brian Know for alerting me and helping to debug   Download: http://www.liblognorm.com/download/liblognorm-0-3-4/ As always, feedback is appreciated. Best regards, […]

liblognorm 0.3.3 released

We have just released liblognorm 0.3.3. This release is for bugfixing purposes only. Changes: Version 0.3.3 (rgerhards), 2012-02-06 required header file was not installed, resulting in compile error closes: http://bugzilla.adiscon.com/show_bug.cgi?id=307 Thanks to Andreis Vinogradovs for alerting us on this bug. Download: http://www.liblognorm.com/files/download/liblognorm-0.3.3.tar.gz As always, feedback is appreciated. Best regards, Florian Riedl

liblognorm 0.3.2 released

We have just released liblognorm 0.3.2. This release includes a new major features. Changes: Version 0.3.2 (rgerhards), 2011-11-21 added rfc5424 parser (requires libee >= 0.3.2) added “-” to serve as name for filler fields. Value is extracted, but no field is written special handling for iptables log via %iptables% parser added (currently experimental pending practical […]

Log normalization and the leading space

When using log normalization, nothing is simple. But we have been asked something about a very common scenario. A log message has been sent to rsyslog. The message itself had no irregular characters. But, the message that should have been parsed by mmnormalize now has a leading space character. Basically, the message that should be […]

Using rsyslog mmnormalize module effectively with Adiscon LogAnalyzer

Using the mmnormalize module in rsyslog is a bit complicated at first. We want to describe in this article how to set up the basic components for using log normalization. In addition to that we will show how to configure these components so messages will be split into pieces of information. These pieces of information […]

liblognorm 0.3.1 released

We have just released liblognorm 0.3.1. This release includes a new major features. Changes: Version 0.3.1 (rgerhards), 2011-04-18 added -t option to normalizer so that only messages with a specified tag will be output bugfix: abort if a tag was assigned to a message without any fields parsed out (uncommon scenario) bugfix: mem leak on […]

Scroll to top