Method parseLine

pkg/acquisition/modules/syslog/run.go:196–246

(syslogLine syslogserver.SyslogMessage)

}

func (s *Source) parseLine(syslogLine syslogserver.SyslogMessage) (string, error) {
	var line string

	logger := s.logger.WithField("client", syslogLine.Client)
	logger.Tracef("raw: %s", syslogLine)

	if s.metricsLevel != metrics.AcquisitionMetricsLevelNone {
		metrics.SyslogDataSourceLinesReceived.With(prometheus.Labels{"source": syslogLine.Client, "datasource_type": ModuleName, "acquis_type": s.config.Labels["type"]}).Inc()
	}

	if s.config.DisableRFCParser {
		rest, err := stripPRI(syslogLine.Message)
		if err != nil {
			return "", err
		}

		return strings.TrimSuffix(string(rest), "\n"), nil
	}

	var err3164, err5424 error
	p := rfc3164.NewRFC3164Parser(rfc3164.WithCurrentYear())

	err := p.Parse(syslogLine.Message)
	if err != nil {
		err3164 = err

		p2 := rfc5424.NewRFC5424Parser()

		err = p2.Parse(syslogLine.Message)
		if err != nil {
			return "", &ParseError{
				Reason:     ErrUnrecognized,
				RawMessage: syslogLine.Message,
				RFC3164:    err3164,
				RFC5424:    err5424,
			}
		}

		line = s.buildLogFromSyslog(p2.Timestamp, p2.Hostname, p2.Tag, p2.PID, p2.Message)
		if s.metricsLevel != metrics.AcquisitionMetricsLevelNone {
			metrics.SyslogDataSourceLinesParsed.With(prometheus.Labels{"source": syslogLine.Client, "type": "rfc5424", "datasource_type": ModuleName, "acquis_type": s.config.Labels["type"]}).Inc()
		}
	} else {
		line = s.buildLogFromSyslog(p.Timestamp, p.Hostname, p.Tag, p.PID, p.Message)
		if s.metricsLevel != metrics.AcquisitionMetricsLevelNone {
			metrics.SyslogDataSourceLinesParsed.With(prometheus.Labels{"source": syslogLine.Client, "type": "rfc3164", "datasource_type": ModuleName, "acquis_type": s.config.Labels["type"]}).Inc()
		}
	}

	return strings.TrimSuffix(line, "\n"), nil
}