Skip to content

Syslog input should support RFC3164 over TCP #17155

Open
@lowjoel

Description

@lowjoel

Use Case

Routers like OpenWrt only emit syslog messages in RFC3164 format, but support the non-standard TCP transport. The existing non-transparent and octet counting methods do work, but do not support the RFC3164 line format. This can be easily resolved with a converter in between telegraf and the source, but it would be ideal if the middleman was not needed.

Expected behavior

The syslog messages get parsed and processed like points from other inputs.

Actual behavior

Currently, the syslog plugin reports:

2025-06-11T10:52:13Z E! [inputs.syslog] Error in plugin: expecting a version value in the range 1-999 [col 4]

Additional info

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature requestRequests for new plugin and for new features to existing plugins

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions