[systemd-devel] journald syslog forwarding

[Holger Winkelmann [TP]]

HI,

>> > Or a broadcast address, so no configuration is required.
>> 
>> I'd really like to see broadcast delivery I must say.

as mentioned, why not if it can switched off and unicasted to the IP:514 

>> > That's rfc5424, right? Then yes.
>> 
>> Is that RFC actually widely adopted? I'd stay as conservative as
>> possible with all of this.
> Ooops, sorry, wrong RFC. I think 3164 is the right one.

RFC 5324 obsoletes RFC 3164, but if it comes to the "format" of the messages most of
the resources point back to RFC3164, so both is slightly right.

in reply to Lennart, at least I know a couple of people correlating and sorting messages based
on the format mentioned above. As already said I would be conservative either and not try to put
all the structure in structured syslog. but adding the few Meta data to the syslog message would
help.

Holger

-- 
Holger Winkelmann

email: holger.winkelmann at travelping.com