[systemd-devel] Looking for experiences formalizing an API for journal messages

[Daurnimator]

On 23 July 2015 at 23:17, Anne Mulhern <amulhern at redhat.com> wrote:
> Hi!
>
> We all know that using the journald native API it is possible to enrich the log
> entry data w/ key/value pairs, although this facility is Linux only.
> The set of key/value pairs which a message may log to the journal can
> constitute an API with which a logging entity can communicate alerts to consumers
> of this information. Clearly this requires an agreement on an API between the logging
> entity and the consumer of the journal entries.
>
> Are there existing projects that have used this facility in a principled,
> coordinated way with some success or have there been any interesting failures
> along those same lines?
>
> Thanks for your help,
>
> - mulhern

The newer syslog standard (RFC 5424) defines a key/value area.
See https://tools.ietf.org/html/rfc5424#section-6.3