#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	syslog
#open	2013-08-26-19-04-22
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	proto	facility	severity	message
#types	time	string	addr	port	addr	port	enum	string	string	string
1365191811.424495	CXWv6p3arKYeMETxOg	127.0.0.1	57067	127.0.0.1	514	udp	LOCAL0	NOTICE	Apr  5 12:56:51 robin: Hello, syslog!\x00
#close	2013-08-26-19-04-22