no rfc compliance with log output

[Benedikt von St. Vieth]

Hi,
we moved from Icehouse to Kilo and removed the "use-syslog-rfc-format" config setting (because it should have gone since Juno). Since the update, our Logstash is not parsing the logs in a correct way.

Log lines appear as follow (with both use_syslog enabled and disabled, for all services) in log files and on the remote logstash daemon:
2015-08-14 11:11:44.296 11642 INFO nova.osapi_compute.wsgi.server [-] (11642) wsgi starting up on http://127.0.0.1:8874/

I can't see RFC 5424 or RFC 3164 compliance, for example:
<158>Aug 14 09:54:40 HOST rsyncd[13079]: sent 31 bytes received 197 bytes total size 0
<134>Aug 14 11:15:18 zam979 account-server: no_change:44 ts_repl:0 diff:0 rsync:0 diff_capped:0 hashmatch:0 empty:0

can anybody confirm this?

[Doug Hellmann (doug-hellmann)]

The log line format can be controlled with configuration options. The default is not likely to be compliant with the standards you mention. If you work out formatting settings that support those standards, we would be happy to add that information to the documentation.