How does syslog-ng validate the header?
Question
I am wondering how syslog-ng validates that the header is in the correct format (pri, timestamp, hostname). Does it use regular expressions for this purpose?
Solution
no, it uses a handwritten parser for this purpose. it's in the syslogformat plugin in 3.3 and was in logmsg.c earlier.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow