zeek/testing/btest/Baseline/scripts.base.protocols.syslog.trace/syslog.log
2016-07-13 10:11:37 -07:00

10 lines
413 B
Text

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path syslog
#open 2016-07-13-16-17-06
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p proto facility severity message
#types time string addr port addr port enum string string string
1365191811.424495 CHhAvVGS1DHFjwGM9 127.0.0.1 57067 127.0.0.1 514 udp LOCAL0 NOTICE Apr 5 12:56:51 robin: Hello, syslog!\x00
#close 2016-07-13-16-17-06