Schema ID: syslog
Timestamp Field: timestamp
This is a DLF schema that can be used to represent most messages logged through syslog-like daemon.
Fields in the Schema
Type: timestamp
Defaults: 0
The timestamp of the logged event.
Type: hostname
Defaults: localhost
The hostname or ip address from which the message was received.
Type: string
Defaults: -
The "process" that logged the event.
Type: int
Defaults: 0
The PID of the originating process that was included in the message.
Type: string
Defaults: -
The syslog facility (kern, mail, local7, etc.) to which the message was logged. This information isn't present in all syslog file formats.
Type: string
Defaults: -
The syslog level (emerg, notice, debug, etc.) to which the message was logged. This information isn't present in all syslog file formats.
Type: string
Defaults: -
The logged event message (after the process and pid parts are removed).