Exceptions

Some exceptions occur for ASCII syslog headers.

The following exceptions are noted for ASCII syslog headers:

  • Some Unix/Linux syslog messages have a path in the process name. That is taken care of by looking for a leading backslash (/) and any number of the following characters:
    • Alpha characters, upper or lower case
      • A-Z
      • a-z
    • The numbers 0-9
    • Punctuation including:
      • underscore _
      • period .
      • dash -
  • The use of space and tab depends on the log source. Some log sources have spaces at the point right before the log source target string is found. Others have only a tab. Specifically:
    • Windows messages require a space before the target string
    • Cisco VPN3000 requires a tab