The structured and full format produce same result

wizecore / graylog2-output-syslog

Customizable, production ready syslog and ArcSight output plugin for Graylog

Apache License 2.0

39 stars 20 forks source link

Closed noillir closed 6 years ago

noillir commented 7 years ago

Using Graylog 2.1.3+040d371 and structured data format still includes the "full message" after message exactly as full does.

huksley commented 7 years ago

Yes you are right.

huksley commented 7 years ago

But not really. If structured format is used, syslog additionally initialized to use structured format:

...
if (sender instanceof StructuredSender) {
// Always send via structured data
syslog.getConfig().setUseStructuredData(true);
} ...

The full format is made upon request by another user.