Add support for BSD style syslog messages RFC 3164 to syslog input #4593
Steps to reproduce:
Message store in InfluxDB
Error in plugin [inputs.syslog]: read udp4 0.0.0.0:6514: i/o timeout
I believe the issue is that nginx outputs only in RFC 3164, but the syslog input only does RFC 5424 messages. There is an issue on go-syslog to add support: influxdata/go-syslog#15.
In the meantime I think a workaround would be to use rsyslog to convert between formats.
@danielnelson maybe an interesting fact or my mistake I'm not exactly sure but... after error ocuire I try to make custom message by logger from shell and no message pass in Influx. I guess that parsing goroutine ended and no more ready to receive UDP packet. Perhaps this is a mistake.
I set up rsyslog to forward over UDP:
And then used the logger command from util-linux:
I did get the message, but also an error message:
Afterwards, I am unable to send to this socket. I think we just want to remove the deadline for the UDP socket altogether, I'll put together a pr.