search

datalust / seq-input-syslog

Ingest Syslog payloads into Seq
https://datalust.co/seq
Apache License 2.0
8 stars 4 forks source link

Support for HAProxy's http log format #24

Closed larenelg closed 3 months ago

larenelg commented 4 years ago

Support native parsing of HAProxy's http log format https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#8.2.3

An example of a Graylog extension built for it: https://marketplace.graylog.org/addons/555e70b7-dcd3-403d-bca5-6fa50bfef3cc

jhf commented 3 years ago

It turns out that HAProxy uses the RFC3164 syslog message format by default, but it can be changed to rfc5424 with a simple configuration change.

Relevant excerpt from /etc/haproxy/haproxy.conf:

global
        log /dev/log format rfc5424 local0

Anybody trying to parse HAProxy syslog messages in Seq should start using the rfc5424 format.

larenelg commented 3 years ago

Thanks @jhf that's great news!