poshsecurity / Posh-SYSLOG

Send SYSLOG messages from PowerShell
http://poshsecurity.com
MIT License
92 stars 19 forks source link

add proc id to RFC3164 #26

Open dicolanl opened 4 years ago

dicolanl commented 4 years ago

Is your feature request related to a problem? Please describe. A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] Add support for process ID in RFC 3164. per https://tools.ietf.org/html/rfc3164#section-5.3 process id would be enclosed in []

Describe the solution you'd like A clear and concise description of what you want to happen. when using -processid with -rfc3164, send the message with process id in []

Examples of how the solution would work Some simple PowerShell examples of how the solution would work. Send-SyslogMessage -Server 172.17.116.142 -Message "CEF:0|Microsoft|Powerhsell|6.2|ID|PWSH|6|src=8.8.8.8 dst=67.166.178.142" -Severity Informational -Facility local7 -RFC3164 -Port 5514 -ProcessID 123

output: <190>Feb 24 11:05:17 172.17.116.129 PowerShell[123]: CEF:0|Microsoft|Powerhsell|6.2|ID|PWSH|6|src=8.8.8.8 dst=67.166.178.142 Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Add any other context or screenshots about the feature request here.