Parser Modules

Parser modules are used to parse message content, once the message has been received. They can be used to process custom message formats or invalidly formatted messages. For details, please see the rsyslog message parser documentation.

The current modules are currently provided as part of rsyslog:

• pmciscoios
  • Parser Parameters
  • Example
• pmlastmsg: last message repeated n times
• Log Message Normalization Parser Module (pmnormalize)
  • Action Parameters
  • See Also
  • Caveats/Known Bugs
  • Example
• pmnull: Syslog Null Parser Module
  • Parser Parameters
  • Example
• pmrfc3164: Parse RFC3164-formatted messages
  • Parser Parameters
  • Example
• pmrfc3164sd: Parse RFC5424 structured data inside RFC3164 messages
• pmrfc5424: Parse RFC5424-formatted messages