liblognorm

a fast samples-based log normalization library

Github星跟蹤圖

Liblognorm is a fast-samples based normalization library.

More information on liblognorm can be found at
http://www.liblognorm.com

Liblognorm evolves since several years and was intially meant to be used primarily with
the Mitre CEE effort. Consequently, the initial version of liblognorm (0.x)
uses the libee CEE support library in its API.

As time evolved, the initial CEE schema underwent considerable change. Even
worse, Mitre lost funding for CEE. While the CEE ideas survived as part
of Red Hat-driven "Project Lumberjack", the data structures became greatly
simplified and JSON based. That effectively made libee obsolete (and also
in parts libestr, which was specifically written to support CEE's
initial requirement of embedded NUL chars in strings).

In 2013, Pavel Levshin converted liblognorm to native JSON, which helped
improve performance and simplicity for many client applications.
Unfortunately, this change broke interface compatibility (and there was
no way to avoid that, obviously...).

In 2015, most parts of liblognorm were redesigned and rewritten as part
of Rainer Gerhards' master thesis. For full technical details of how
liblognorm operates, and why it is so fast, please have a look at

https://www.researchgate.net/publication/310545144_Efficient_Normalization_of_IT_Log_Messages_under_Realtime_Conditions

The current library is the result of that effort. Application developers
are encouraged to switch to this version, as it provides the benefit of
a simpler API. This version is now being tracked by the git master branch.

However, if you need to stick to the old API, there is a git branch
liblognorm0, which contains the previous version of the library. This
branch is also maintained for important bug fixes, so it is safe to use.

We recommend that packagers create packages both for liblognorm0 and
liblognorm1. Note that liblognorm's development packages cannot
coexist on the same system as the PKGCONFIG system would get into
trouble. Adiscon's own packages follow this schema.

主要指標

概覽
名稱與所有者rsyslog/liblognorm
主編程語言C
編程語言C (語言數: 4)
平台
許可證GNU Lesser General Public License v2.1
所有者活动
創建於2013-06-12 16:07:18
推送於2025-10-13 19:02:48
最后一次提交2023-08-11 16:12:13
發布數22
最新版本名稱v2.0.7 (發布於 2025-10-13 19:01:55)
第一版名稱v0.1.0 (發布於 )
用户参与
星數100
關注者數24
派生數66
提交數819
已啟用問題?
問題數196
打開的問題數79
拉請求數132
打開的拉請求數28
關閉的拉請求數24
项目设置
已啟用Wiki?
已存檔?
是復刻?
已鎖定?
是鏡像?
是私有?