|
1 | 1 | Syslog Protocol DFDL Schema |
2 | 2 | ==== |
3 | | -Support for: |
4 | | -- RFC-5424 |
5 | | -- RFC-3164 |
6 | | -- Cisco |
7 | | -- ESXi |
| 3 | +Includes support for the following syslog variants: |
8 | 4 |
|
9 | | -There are two root elements to choose from: |
| 5 | +- RFC-5424 (`syslog-rfc5424.dfdl.xsd`) |
| 6 | +- RFC-3164 (`syslog-rfc3164.dfdl.xsd`) |
| 7 | +- Cisco (`syslog-cisco.dfdl.xsd`) |
| 8 | +- ESXi (`syslog-esxi.dfdl.xsd`) |
10 | 9 |
|
11 | | -Syslog - straight RFC 5423 logging |
| 10 | +Each file defines the format of a specific variant as well as a root element |
| 11 | +that can be used to parse only that variant. |
12 | 12 |
|
13 | | -SolarwindsSyslog - The combined Solarwinds Syslog |
14 | | -format which supports all the above-listed formats. |
| 13 | +To support all possible variants, the `syslog.dfdl.xsd` file defines a `Syslog` |
| 14 | +root element. |
15 | 15 |
|
16 | | -This schema works with the Daffodil DFDL implementation. |
17 | | -It uses dfdl:inputValueCalc and dfdl:outputValueCalc in |
18 | | -the Facility and Severity elements. |
| 16 | +To support all possible variants from a Solarwinds log forwarder, which inserts |
| 17 | +data immediately after the priority value, the `syslog-solarwinds.dfdl.xsd` |
| 18 | +file defines a `SolarwindsSyslog` root element. |
19 | 19 |
|
20 | | -A portable version works also with IBM DFDL. |
21 | | -This doesn't parse the Prival information into |
22 | | -Facility and Severity, but is otherwise identical. |
| 20 | +## Portability |
23 | 21 |
|
24 | | -Change History |
| 22 | +This schema is known to work with the Daffodil DFDL implementation. It uses |
| 23 | +dfdl:inputValueCalc and dfdl:outputValueCalc in the Facility and Severity |
| 24 | +elements, which do not work with IBM DFDL. |
25 | 25 |
|
26 | | -* 0.1.0: Initial support for RFC-5424, RFC-3164 and Cisco |
27 | | -* 0.1.1: Support for ESXi |
28 | | -* 0.1.2: Support for Solarwinds as well as standard Syslog in same schema. |
29 | | -* 1.0.0: Portable variant that works with IBM DFDL. |
30 | | -Removed version number from namespace URI. |
31 | | -Changed branding from Tresys to Owl. |
| 26 | +However, the `common.dfdl.xsd` file can be modified to enable support for IBM |
| 27 | +DFDL. See the documentation annotations in the `PriorityValue` groups for |
| 28 | +details on the needed adjustments. Additionally, `encodingErrorPolicy` must be |
| 29 | +changed from "replace" to "error" when used with IBM DFDL |
32 | 30 |
|
| 31 | +## Release Notes |
| 32 | + |
| 33 | +### 2.0.0 |
| 34 | +- Modifies Syslog element to support all variants at once |
| 35 | +- New schemas support parsing only individual variants |
| 36 | +- Removes IBM DFDL portability, but provides details to make it portable |
| 37 | + |
| 38 | +### 1.0.0 |
| 39 | +- Portable variant that works with IBM DFDL. |
| 40 | +- Removed version number from namespace URI. |
| 41 | +- Changed branding from Tresys to Owl. |
| 42 | + |
| 43 | +### 0.1.2 |
| 44 | +- Support for Solarwinds as well as standard Syslog in same schema. |
| 45 | + |
| 46 | +### 0.1.1 |
| 47 | +- Support for ESXi |
| 48 | + |
| 49 | +### 0.1.0: |
| 50 | +- Initial support for RFC-5424, RFC-3164 and Cisco |
0 commit comments