rsyslog / liblognorm

a fast samples-based log normalization library
http://www.liblognorm.com
GNU Lesser General Public License v2.1
99 stars 64 forks source link

checkpoint-lea parser needs update #309

Closed rgerhards closed 5 years ago

rgerhards commented 5 years ago

In the wild, we see that checkpoint-lea format may not be the last inside a log line. We tried to get more info on the format from the affected party (working as a proxy to Checkpoint), but again this failed. So we still have not spec.

Solution is to add an option so that this behavior is permitted. Obviously, we need to stick to old behavior by default.