Syslog Processor
File: src/processors/syslog.py | Priority: 42 | Name: syslog |
Handles system log output from journalctl and dmesg.
Supported Commands
| Command | Strategy |
journalctl | Head/tail compression with error extraction |
dmesg | Same strategy |
Compression Strategy
Uses the shared compress_log_lines() utility:
- Head: First 10 lines preserved (boot/startup messages)
- Tail: Last 20 lines preserved (most recent entries)
- Errors: Lines matching error/exception/fatal/panic/traceback patterns are preserved with 2 lines of context
- Error cap: Maximum 50 error-related lines to prevent explosion on noisy logs
- Threshold: Output with 30 or fewer lines passes through unchanged
Configuration
| Parameter | Default | Description |
file_log_context_lines | 2 | Context lines around errors in log output |