Current File : //backups/router/usr/local/include/syslog-ng/msg-format.h
/*
* Copyright (c) 2002-2012 Balabit
* Copyright (c) 1998-2012 Balázs Scheidler
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
* As an additional exemption you are allowed to compile & link against the
* OpenSSL libraries as published by the OpenSSL project. See the file
* COPYING for details.
*
*/
#ifndef MSG_FORMAT_H_INCLUDED
#define MSG_FORMAT_H_INCLUDED
#include "syslog-ng.h"
#include "timeutils/zoneinfo.h"
#include "logproto/logproto-server.h"
#include <regex.h>
enum
{
/* don't parse the message, put everything into $MSG */
LP_NOPARSE = 0x0001,
/* check if the hostname contains valid characters and assume it is part of the program field if it isn't */
LP_CHECK_HOSTNAME = 0x0002,
/* message is using RFC5424 format */
LP_SYSLOG_PROTOCOL = 0x0004,
/* the caller knows the message is valid UTF-8 */
LP_ASSUME_UTF8 = 0x0008,
/* validate that all characters are indeed UTF-8 and mark the message as valid when relaying */
LP_VALIDATE_UTF8 = 0x0010,
/* sanitize input and force it to be valid UTF-8 by escaping */
LP_SANITIZE_UTF8 = 0x0020,
/* the message may not contain NL characters, strip them if it does */
LP_NO_MULTI_LINE = 0x0040,
/* don't store MSGHDR in the LEGACY_MSGHDR macro */
LP_STORE_LEGACY_MSGHDR = 0x0080,
/* expect a hostname field in the message */
LP_EXPECT_HOSTNAME = 0x0100,
/* message is locally generated and should be marked with LF_LOCAL */
LP_LOCAL = 0x0200,
/* for the date part of a message, only skip it, don't fully parse - recommended for keep_timestamp(no) */
LP_NO_PARSE_DATE = 0x0400,
LP_STORE_RAW_MESSAGE = 0x0800,
LP_GUESS_TIMEZONE = 0x1000,
LP_NO_HEADER = 0x2000,
LP_NO_RFC3164_FALLBACK = 0x4000,
LP_PIGGYBACK_ERRORS = 0x8000,
};
typedef struct _MsgFormatHandler MsgFormatHandler;
typedef struct _MsgFormatOptions
{
gboolean initialized;
gchar *format;
MsgFormatHandler *format_handler;
guint32 flags;
guint16 default_pri;
gchar *recv_time_zone;
TimeZoneInfo *recv_time_zone_info;
regex_t *bad_hostname;
gchar *sdata_prefix;
gsize sdata_prefix_len;
gint sdata_param_value_max;
gboolean use_fqdn;
} MsgFormatOptions;
struct _MsgFormatHandler
{
/* this method has a chance to change the LogProto related options to
* match the requirements of the "format" in question. This is used by
* the "pacct" plugin to set the record length the proper size
*/
LogProtoServer *(*construct_proto)(const MsgFormatOptions *options, LogTransport *transport,
const LogProtoServerOptions *proto_options);
gboolean (*parse)(const MsgFormatOptions *options, LogMessage *msg,
const guchar *data, gsize length,
gsize *problem_position);
};
gboolean msg_format_try_parse_into(MsgFormatOptions *options, LogMessage *msg,
const guchar *data, gsize length,
gsize *problem_position);
void msg_format_parse_into(MsgFormatOptions *options, LogMessage *msg,
const guchar *data, gsize length);
LogMessage *msg_format_construct_message(MsgFormatOptions *options, const guchar *data, gsize length);
LogMessage *msg_format_parse(MsgFormatOptions *options, const guchar *data, gsize length);
gboolean msg_format_options_set_sdata_prefix(MsgFormatOptions *options, const gchar *prefix);
void msg_format_options_defaults(MsgFormatOptions *options);
void msg_format_options_init(MsgFormatOptions *parse_options, GlobalConfig *cfg);
void msg_format_options_destroy(MsgFormatOptions *parse_options);
void msg_format_options_copy(MsgFormatOptions *options, const MsgFormatOptions *source);
gboolean msg_format_options_process_flag(MsgFormatOptions *options, const gchar *flag);
#endif
Mini Shell