jq syslog parser

syslog.jq

def from_syslog:
  ( split("\n")
  | map(
      ( capture("^(?<ts>\\w{3}\\s+\\d{1,2} +[\\d:]+) (?<host>\\w+) (?<process>\\w+)\\[(?<pid>\\d+)\\]: (?<message>.*)$")
      | .ts |= strptime("%b %d %H:%M:%S")
      | .pid |= tonumber
      )
    )
  );