2nd header form not handled

Question

2nd header form not handled

Closed this issue 7 years ago · 4 comments

the spec says headers can be of two formats, i'm getting errors when processes use the 2nd format, am i right in thinking this isn't handled?

HEADER          = PRI VERSION SP TIMESTAMP SP HOSTNAME
                  SP APP-NAME SP PROCID SP MSGID

Answer 1 · 2017-11-16T15:18:21.000Z

uh am i reading this wrong :)? i've some weird messages from somewhere and they don't work :/ hmm

Answer 2 · 2017-11-16T15:23:10.000Z

yea i'm being stupid and these messages are super malformed

Answer 3 · 2017-11-16T21:15:44.000Z

turns out that hslogger makes such rubbish messages that it convinced me i must have misunderstood the spec
https://hackage.haskell.org/package/hslogger-1.2.10/docs/src/System-Log-Handler-Syslog.html#SyslogHandler

Answer 4 · 2017-11-16T22:48:53.000Z

There are a lot of questionably-formatted "syslog" messages out there; this library isn't super-great at following that IETF adage about being generous in what you accept and strict in what you emit. :-/