SYSLOG
Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.
syslog Preview.
At a glance
| Purpose | A syslog file in BSD (RFC 3164) or RFC 5424 format: timestamped log lines with host, tag, PID and priority. |
| Extensions | .syslog |
| Poka parser | poka-syslog |
| Viewer | poka-table-viewer |
| Depth tier | Parser with a shared viewer (see Depth tiers) |
| Breadth tier | B2 Broad (see Breadth tiers) |
How much Poka reads
B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.
Confidence: medium (the reviewer read the code). Basis: Reviewed 2026-10-26: read parsers/poka-syslog/src/main.rs (374 lines) and plugin.json. No unit tests or tests/samples.rs; the corpus has no .syslog and .log-syslog sample. Covers .syslog and .log-syslog. The table lists every line with timestamp, host, tag, PID, priority (as facility and severity) and message. Judgement: B2: every entry is shown; the gaps are limits, redaction by design and fields left raw.
What Poka does not read
- RFC 5424 structured data and message IDs are not shown separately (judgement from the code)
- BSD timestamps have no year and are shown as written
- Continuation lines are not joined to their message
- Only the first 2,000 lines are listed
Libraries
Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.
- syslog_rfc5424 (candidate; ISC; Rust; https://github.com/roguelazer/rust-syslog-rfc5424) — RFC 5424 message parser with optional serde; does not cover older BSD RFC 3164 lines.
- syslog_loose (candidate; MIT; Rust; https://github.com/FungusHumungus/syslog-loose) — A loose parser for syslog messages.; v0.23.0, updated 2025-08-13; matched on lib.rs, not tested
Sources
- parsers/poka-syslog/src/main.rs
- parsers/poka-syslog/plugin.json