Skip to content

Instantly share code, notes, and snippets.

@eiri
Created August 23, 2018 14:08
Show Gist options
  • Save eiri/b0cd67407c01ce9290d66e81d76547f4 to your computer and use it in GitHub Desktop.
Save eiri/b0cd67407c01ce9290d66e81d76547f4 to your computer and use it in GitHub Desktop.
Two formats of syslog message

Formats of syslog

rfc 5424

<PRI>VER TIMESTAMP HOSTNAME APP-NAME PROCID MSGID [SOURCETYPE@NM_IANA key1="val1" key2="val2" etc.]

example: <34>1 2003-10-11T22:14:15.003Z mymachine.example.com su ID47 d25c5bf1 - BOM'su root' failed for lonvick on /dev/pts/8

rfc 3164

<PRI>TIMESTAMP HOSTNAME APP-NAME[PROCID]: sourcetype="SOURCETYPE" key1="val1" key2="val2" etc.

example: <34>Oct 11 22:14:15 mymachine.example.com su[ID47]: - BOM'su root' failed for lonvick on /dev/pts/8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment