Created 08-27-2018 11:15 AM
I am using Metron 0.4.1
I want to write syslog parser but I don't know how to do it.
thanks for helping me.
Created 08-27-2018 11:38 AM
@mojgan ghasemi
<%{POSINT:syslog_priority}>%{SYSLOGTIMESTAMP:date} %{IPORHOST:device}
Created 08-27-2018 06:34 PM
https://github.com/apache/metron/pull/1175
Supports RFC 5424 messages only