[pve-devel] pve-firewall : logstash tests

Alexandre DERUMIER aderumier at odiso.com
Mon Mar 24 09:14:53 CET 2014


Hi,

I have done tests with logstash.
I can parse easily currents logs, so no need for json format.

Only thing,is that logstash works better(more precision),
with ISO_8601 date format.

They are a example in json ulogd plugin
http://git.netfilter.org/ulogd2/commit/?id=2b39df550fbad944b4aab77617d4272c5d62ba70


+		if (pp_is_valid(inp, opi->usec_idx)) {
+			snprintf(timestr, MAX_LOCAL_TIME_STRING,
+					"%04d-%02d-%02dT%02d:%02d:%02d.%06u",
+					t->tm_year + 1900, t->tm_mon + 1,
+					t->tm_mday, t->tm_hour,
+					t->tm_min, t->tm_sec,
+					ikey_get_u32(&inp[opi->usec_idx]));
+		} else {
+		


do you think it's possible to add such option ?



More information about the pve-devel mailing list