vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 15:39:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Add support for syslog format RFC 5424

Browse source
This commit is contained in:
Alfredo Cardigliano 2021-02-25 14:50:23 +01:00
parent 6a4c6cf30c
commit bd55990961
4 changed files with 36 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

22
scripts/plugins/endpoints/syslog_alert_endpoint/alert_endpoints/syslog.lua
View file

@ -93,13 +93,12 @@ function syslog.sendMessage(settings, notif, severity)
else
return false
end
else -- syslog_format == "plaintext"
-- prepare a plaintext message
else -- syslog_format == "plaintext" or "plaintextrfc"
-- prepare a plain text message
msg = alert_utils.formatAlertNotification(json.decode(notif), {
nohtml = true,
show_severity = true,
show_entity = true})
end
if settings.host == nil then
@ -110,15 +109,26 @@ function syslog.sendMessage(settings, notif, severity)
local level = 1 -- alert (what about mapping severity?)
local prio = (facility * 8) + level
local date = format_utils.formatEpoch() -- "2020-11-09 18:00:00"
local iso_time = format_utils.formatEpochISO8601() -- ""
local host_info = ntop.getHostInformation()
local host = host_info.ip
local tag = "ntopng"
local info = ntop.getInfo()
local pid = info.pid
-- Example
-- Example: <113>09/11/2020 18:31:21 192.168.1.1 ntopng[21365]: ...
msg = "<"..prio..">"..date.." "..host.." "..tag.."["..pid.."]: "..msg
if syslog_format and syslog_format == "plaintextrfc" then
-- RFC5424 Format:
-- <PRIO>VERSION ISOTIMESTAMP HOSTNAME APPLICATION PID MESSAGEID MSG
-- Example:
-- <113>1 2020-11-19T18:31:21.003Z 192.168.1.1 ntopng 21365 ID1 -
msg = "<"..prio..">1 "..iso_time.." "..host.." "..tag.." "..pid.." - - "..msg
else
-- Unix Format:
-- <PRIO>DATE TIME DEVICE APPLICATION[PID]: MSG
-- Example:
-- <113>09/11/2020 18:31:21 192.168.1.1 ntopng[21365]: ...
msg = "<"..prio..">"..date.." "..host.." "..tag.."["..pid.."]: "..msg
end
if settings.protocol == 'tcp' then
ntop.send_tcp_data(settings.host, settings.port, msg.."\n", 1 --[[ timeout (msec) --]] )