Tools

Syslog message formatting

This article provides information on some message formats, as the syslog RFC 3164 and 5424 are originally written for Unix/Linux system, however when different manufacturers design the message format they are not all 100% alike... When following the message format based on the RFC, we can see some difference in the message text that comes across the console.

First published date

10/12/2018 5:09 PM

Last published date

10/12/2018 5:09 PM

Overview

This article provides information on some message formats, as the syslog RFC 3164 and 5424 are originally written for Unix/Linux system, however when different manufacturers design the message format they are not all 100% alike... When following the message format based on the RFC, we can see some difference in the message text that comes across the console.

Product section

Kiwi Syslog Server

Resolution

Under the modifier option in Kiwi Syslog Server, we can use Parse RFC 3164 headers and imbedded time and date which changes how the messages are processed when sent from a device already using these options. It will not display a duplicate of date or time. The console notes the time and date of the message received, as well as message time or date within the message text if used. 
Find more information on syslog message modifiers here.