[systemd-devel] journald syslog forwarding

Holger Winkelmann [TP] hw at travelping.com
Thu Dec 11 08:21:50 PST 2014


>> Would the upload tool learn a new URL for this purpose i.e. syslog://<ip>:514 ?
> Or a broadcast address, so no configuration is required.

Hmmm. Admin guys would not really like broadcast here. But anyway would not argue
much if it can be configured.

>> >> > Initial plan was to implement the most straighforward syslog forwarding,
>> >> > so only the MESSAGE field would be sent.
>> >>  
>> >> it would be great to have at least the following format to send to syslog:
>> >> 
>> >> "<%pri%>%protocol-version% %timestamp:::date-rfc3339% %HOSTNAME% %app-name%
>> >> %procid% %msg%\n"
>> >> 
>> >> described as rsyslog configuration. All the meta infos are there IMHO.
>> > Yes. We just wouldn't go into "structured" syslog messages to carry other
>> > fields.
>> I agreed as well mapping then into the "struct syslog format" wold be a config
>> pain I assume. However the one we listed above should be there ?!?!...
> That's rfc5424, right? Then yes.

Yes, it is

Holger Winkelmann

email: holger.winkelmann at travelping.com

More information about the systemd-devel mailing list