Skip to content

Incorrect timestamp format in syslog rfc3164 exporter #5458

@johan-sjoberg

Description

@johan-sjoberg

Component(s)

otelcol.exporter.syslog

What's wrong?

When using the syslog exporter with a protocol of rfc3164 the timestamp does not conform to the rfc.

https://www.rfc-editor.org/rfc/rfc3164.html#section-4.1.2

If the day of the month is less
than 10, then it MUST be represented as a space and then the
number. For example, the 7th day of August would be
represented as "Aug 7", with two spaces between the "g" and
the "7".

Steps to reproduce

Pass a RFC3164 syslog message to the receiver, with a timestamp of which the day of month is less than 10.

Expected Result

The exporter transmits:
<14>Sep 3 23:12:35 aoip-d011 ...
The day of month is space padded

Actual Result

The exporter transmits:
<14>Sep 03 23:12:35 aoip-d011 ...
The day of month is zero padded

System information

No response

Software version

grafana/alloy:v1.12.2

Configuration

otelcol.receiver.syslog "bubble_syslog" {
  protocol = "rfc3164"
  
  udp {
    listen_address = "0.0.0.0:1514"
  }
  
  output {
    logs = [otelcol.exporter.syslog.external.input]
  }
}

otelcol.exporter.syslog "external" {
  endpoint = "hostname"
  network  = "udp"
  protocol = "rfc3164"
  
  tls {
    insecure = true
  }
}

Logs


Tip

React with 👍 if this issue is important to you.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions