liblognorm 2.0.6 released

Wednesday, November 7th, 2018

We have just released liblognorm 2.0.6. This release mostly features enhancements and fixes to field type definitions like checkpoint-lea and cisco-interface-spec. Also liblognorm now builds on AIX. See the Changelog for details.

Version 2.0.6, 2018-11-06

  • implement Checkpoint LEA transfer format
    … at least if we guess right that this is the format name. This
    type of format seems to be seen in syslog message. Checkpoint does
    not provide a spec, so everything is guesswork… 🙁
  • made build on AIX
    Thanks to Philippe Duveau for the patch.
  • fixes and improvements in bash scripting
    mostly based on shellcheck recommandations (via
  • string parser: add “lazy” matching mode
    This introduces paramter “matching.lazy”. See doc for details.
  • bugfix: suppress invalid param error for field name “-”
    Suppress invalid param error for name for hexnumber, float, number,
    date-rfc3164 and date-rfc5424. It will just check if name is “-” to
    make sure that we only suppress the error message in case we do not
    want to capture something.
    Thanks to Sol Huebner for the patch.
  • bugfix: cisco-interface-spec did not succeed when at end of line
    Thanks to Sol Huebner for the patch.



As always, feedback is appreciated.

Best regards,
Florian Riedl