[METRON-1453] Create a Generic Syslog Base Parser Capability

• Type: New Feature
• Status: Done
• Priority: Major
• Resolution: Done
• Assignee: Otto Fowler
• Reporter: Otto Fowler
• Created: 09/Feb/18 15:28
• Updated: 28/Dec/18 15:57
• Resolved: 28/Dec/18 15:57

Description

We have several parsers now, with many imaginable that are based on syslog, where the format is SYSLOG HEADER MESSAGE.

With message being in a different format.  It would be great is we

had a way to generically handle syslog headers, such that ANY parser data could come over syslog.

Either you could have a custom parser, or configure CSV or JSON such that they could be the payload, such that you can handle JSON over syslog by configuration only.

 

Issue Links

• links to: GitHub Pull Request #1175