Syslog5424Reader 2.0.0

Bundle
org.apache.nifi | nifi-record-serialization-services-nar
Description
Provides a mechanism for reading RFC 5424 compliant Syslog data, such as log files, and structuring the data so that it can be processed.
Tags
logfiles, logs, parse, reader, record, syslog, syslog 5424, text
Input Requirement
Supports Sensitive Dynamic Properties
false
  • Additional Details for Syslog5424Reader 2.0.0

    Syslog5424Reader

    The Syslog5424Reader Controller Service provides a means for parsing valid RFC 5424 Syslog messages. This service produces records with a set schema to match the specification.

    The Required Property of this service is named Character Set and specifies the Character Set of the incoming text.

    Schemas

    When a record is parsed from incoming data, it is parsed into the RFC 5424 schema.

    The RFC 5424 schema

    {
  "type": "record",
  "name": "nifiRecord",
  "namespace": "org.apache.nifi",
  "fields": [
    {
      "name": "priority",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "severity",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "facility",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "version",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "timestamp",
      "type": [
        "null",
        {
          "type": "long",
          "logicalType": "timestamp-millis"
        }
      ]
    },
    {
      "name": "hostname",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "body",
      "type": [
        "null",
        "string"
      ]
    },
    "name"
    :
    "appName",
    "type"
    :
    [
      "null",
      "string"
    ]
    },
    {
      "name": "procid",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "messageid",
      "type": [
        "null",
        "string"
      ]
    },
    {
      "name": "structuredData",
      "type": [
        "null",
        {
          "type": "map",
          "values": {
            "type": "map",
            "values": "string"
          }
        }
      ]
    }
  ]
}
Properties