concepts / log-formats-and-parsing / syslog

Timber Parsing - Syslog

Timber recognizes the formats outlines in the Syslog 5424 and Syslog 3164 specifications. In practice these messages look like:

<34>1 2003-10-11T22:14:15.003Z mymachine.example.com su - ID47 - 'su root' failed for lonvick on /dev/pts/8

Each field is mapped to the appropriate Timber log event JSON schema field.

Questions?

Chat with us, just click the talk button in the bottom right of this page.

Chat with us
Sign Up

Log better and solve problems faster, today. Install in under a minute.

Sign Up