SyslogReader 2.1.0

Bundle
org.apache.nifi | nifi-record-serialization-services-nar
Description
Attempts to parses the contents of a Syslog message in accordance to RFC5424 and RFC3164. In the case of RFC5424 formatted messages, structured data is not supported, and will be returned as part of the message.Note: Be mindfull that RFC3164 is informational and a wide range of different implementations are present in the wild.
Tags
logfiles, logs, parse, reader, record, syslog, text
Input Requirement
Supports Sensitive Dynamic Properties
false
  • Additional Details for SyslogReader 2.1.0

    Syslog5424Reader

    The SyslogReader Controller Service provides a means to parse the contents of a Syslog message in accordance to RFC5424 and RFC3164 formats. This reader produces records with a set schema to match the common set of fields between the specifications.

    The Required Property of this service is named Character Set and specifies the Character Set of the incoming text.

    Schemas

    When a record is parsed from incoming data, it is parsed into the Generic Syslog Schema.

    The Generic Syslog Schema

    {
  "type": "record",
  "name": "nifiRecord",
  "namespace": "org.apache.nifi",
  "fields": [
    {
      "name": "priority",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "severity",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "facility",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "version",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "timestamp",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "hostname",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "body",
      "type": [
        "null",
        "string"
      ]
    }
  ]
}
Properties