[systemd-devel] @cee {<jsondict|} spec? Was: Systemd service and structured logging

[Mantas Mikulėnas]

On Tue, May 7, 2019 at 10:40 AM Thomas Güttler <guettliml at thomas-guettler.de>
wrote:

> Hi Mantas Mikulėnas and other members,
>
> This looks nice:
>
>    @cee: {<jsondict>}
>
> For me this is new. I could find some scattered information about this.
>
> Is there an official spec for this logging syntax?
>

I believe it's called "CEE log transport format
<http://cee.mitre.org/language/1.0-beta1/clt.html>", and it's supported by
receivers such as rsyslog or elasticsearch. Seems to consist of a "@cee: "
prefix immediately followed by a JSON object/dictionary ("CEE log syntax,
JSON encoding").

http://peter-hoffmann.com/2015/structured-logging-with-python-and-cee-syslog-handler.html
https://www.rsyslog.com/json-elasticsearch/
https://github.com/framed-data/cee-format

-- 
Mantas Mikulėnas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/systemd-devel/attachments/20190507/91b9292c/attachment.html>