Fast and flexible log normalization library
Fast and flexible log normalization library
We have just released liblognorm 0.3.2. This release includes a new major features. Changes: Version 0.3.2 (rgerhards), 2011-11-21 added rfc5424 parser (requires libee >= 0.3.2) added “-” to serve as name for filler fields. Value is extracted, but no field is written special handling for iptables log via %iptables% parser added (currently experimental pending practical […]
We have just released liblognorm 0.3.1. This release includes a new major features. Changes: Version 0.3.1 (rgerhards), 2011-04-18 added -t option to normalizer so that only messages with a specified tag will be output bugfix: abort if a tag was assigned to a message without any fields parsed out (uncommon scenario) bugfix: mem leak on […]
Today, we have added support for so-called “tags” to liblognorm (and it’s base library libee). This new capabilities permits very easy classification of syslog message and log records in general. So you can not only extract data from your various log source, you can also classify events, for example, as being a “login”, a “logout” […]
We have just released liblognorm 0.3.0. This release includes a new major feature and a bugfix.
We have just released liblognorm 0.2.0. This release includes some bug fixes and feature enhancements.
Thankfully, the interest in log normalization and the related libraries liblognorm and libee has increased. Up until now, we have handled discussions on this topics via the rsyslog mailing list. As conversations increase, this may be come an unnecessary burden for those only interested in rsyslog. So we have created a new mailing list named […]
Liblognorm is a event and log normalization library that is capable of real-time processing. It provides the capability to normalize events to a set of standard formats. It is most efficient when used together with almost unstructured data, as for example found in typical syslog messages. While liblognorm provides a service similar to other projects, […]
We just wanted to give you a quick heads-up on our current development efforts: We have begun to work heavily on a message modfication module for rsyslog which will support liblognorm-style normalization inside rsyslog. In git there already is a branch “lognorm”, which we will hopefully complete and merge into master soon. It provides some […]
At the beginning of this week we were pretty confident, that we would not make our self-set deadline of one month to implement a first rough proof of concept of liblognorm, a log normalizing library. Fortunately, we made extremely good progress the past two days and we are now happy to say that we have […]
Liblognorm shall help to make sense out of syslog data, or, actually, any event data that is present in text form. In short words, one will be able to throw arbitrary log message to liblognorm, one at a time, and for each message it will output well-defined name-value pairs and a set of tags describing […]