liblognorm 2.0.6 released

Wednesday, November 7th, 2018

We have just released liblognorm 2.0.6. This release mostly features enhancements and fixes to field type definitions like checkpoint-lea and cisco-interface-spec. Also liblognorm now builds on AIX. See the Changelog for details.

Version 2.0.6, 2018-11-06

  • implement Checkpoint LEA transfer format
    … at least if we guess right that this is the format name. This
    type of format seems to be seen in syslog message. Checkpoint does
    not provide a spec, so everything is guesswork… 🙁
  • made build on AIX
    Thanks to Philippe Duveau for the patch.
  • fixes and improvements in bash scripting
    mostly based on shellcheck recommandations (via
  • string parser: add “lazy” matching mode
    This introduces paramter “matching.lazy”. See doc for details.
  • bugfix: suppress invalid param error for field name “-”
    Suppress invalid param error for name for hexnumber, float, number,
    date-rfc3164 and date-rfc5424. It will just check if name is “-” to
    make sure that we only suppress the error message in case we do not
    want to capture something.
    Thanks to Sol Huebner for the patch.
  • bugfix: cisco-interface-spec did not succeed when at end of line
    Thanks to Sol Huebner for the patch.



As always, feedback is appreciated.

Best regards,
Florian Riedl

liblognorm 2.0.6

Wednesday, November 7th, 2018

Download file name: liblognorm 2.0.6

liblognorm 2.0.6
sha256 hash: cff057e85c22038992f9ed12eb8d4e63c45adf53a5a51faaa3279f605809f6f2

Author: Rainer Gerhards (
Version: 2.0.6 File size: 0.667 MB

Download this file now!