Skip to content

RFC3164 syslog message without PRI are dropped / lost #3007

@gogglespisano

Description

@gogglespisano

What's wrong?

loki.source.syslog drops messages in RFC3164 format that do not include the PRI field, logging it as an error.

The PRI field is not mandatory in RFC3164. These messages should be parsed and the facility and severity level unset or set to default values.

Steps to reproduce

Send a RFC3164 syslog message that does not include the PRI field.

System information

No response

Software version

No response

Configuration

loki.source.syslog "XXX" {
  listener {
    address = "0.0.0.0:1234"
    protocol = "udp"
    syslog_format = "rfc3164"
    label_structured_data = true
    use_rfc5424_message = true
  }
}

Logs


Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions