[systemd-devel] journald syslog forwarding

Holger Winkelmann [TP] hw at travelping.com
Thu Dec 11 08:29:23 PST 2014


>> > Or a broadcast address, so no configuration is required.
>> I'd really like to see broadcast delivery I must say.

as mentioned, why not if it can switched off and unicasted to the IP:514 

>> > That's rfc5424, right? Then yes.
>> Is that RFC actually widely adopted? I'd stay as conservative as
>> possible with all of this.
> Ooops, sorry, wrong RFC. I think 3164 is the right one.

RFC 5324 obsoletes RFC 3164, but if it comes to the "format" of the messages most of
the resources point back to RFC3164, so both is slightly right.

in reply to Lennart, at least I know a couple of people correlating and sorting messages based
on the format mentioned above. As already said I would be conservative either and not try to put
all the structure in structured syslog. but adding the few Meta data to the syslog message would


Holger Winkelmann

email: holger.winkelmann at travelping.com

More information about the systemd-devel mailing list