| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: liblognorm5 | Distribution: openSUSE Tumbleweed |
| Version: 2.1.0 | Vendor: openSUSE |
| Release: 1.2 | Build date: Tue Jun 2 13:48:29 2026 |
| Group: Development/Libraries/C and C++ | Build host: reproducible |
| Size: 198111 | Source RPM: liblognorm-2.1.0-1.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://www.liblognorm.com/ | |
| Summary: Library and tool to normalize log data | |
Liblognorm is a library and a tool to normalize log data. Liblognorm shall help to make sense out of syslog data, or, actually, any event data that is present in text form. In short words, one will be able to throw arbitrary log message to liblognorm, one at a time, and for each message it will output well-defined name-value pairs and a set of tags describing the message. So, for example, if you have traffic logs from three different firewalls, liblognorm will be able to "normalize" the events into generic ones. Among others, it will extract source and destination ip addresses and ports and make them available via well-defined fields. As the end result, a common log analysis application will be able to work on that common set and so this backend will be independent from the actual firewalls feeding it. Even better, once we have a well-understood interim format, it is also easy to convert that into any other vendor specific format, so that you can use that vendor's analysis tool.
Apache-2.0 AND LGPL-2.1-or-later
* Tue Jun 02 2026 Petr Gajdos <pgajdos@suse.com>
- version update to 2.1.0:
* add TurboVM bytecode engine for high-performance log parsing
Compiles rulebases into optimized bytecode executed by a linear VM
with SIMD-accelerated parsing primitives (SSE4.2 on x86-64, NEON
on ARM64, scalar fallback for other architectures).
Key features:
- arena-based allocation (single malloc per message, O(1) reset)
- fast result structure (typed fields, zero JSON overhead)
- snapshot support for async consumers (rsyslog worker queues)
- automatic fallback to recursive walker on compilation failure
New API: ln_turbo_normalize(), ln_fast_result_get_string/int(),
ln_turbo_snapshot_result(). New context option: LN_CTXOPT_TURBO.
Enabled via: ./configure --enable-turbo
Contributed by Jérémie Jourdin / Advens.
* pcre2 used instead of pcre (which is no longer supported)
* add a parameter skipempty to the json field type.
If skipempty is set as follows, empty json objects are dropped from
the parsed result.
%field_name:json:skipempty%
If any parameter other than "skipempty" is given ("bogus" in this
example), an error message "invalid flag for JSON parser: bogus"
is issued.
Thanks to Noriko Hosoi for the patch.
* json parser: add optional "skipempty" flag
This removes empty strings, empty arrays and empty objects from parsed
JSON content before it is attached to the result tree.
Thanks to Noriko Hosoi for the original patch. Follow-up work to rebase,
document, and align validation tests was done by Adiscon.
NOTE: This is a potential backward-compatibility change for malformed
rulebases that used extra json parser flags such as
"%field:json:bogus%". Such invalid flags were previously ignored and are
now rejected during rule loading.
* Op-quoted-string : Add support for escaped characters
Thanks to Kevin Guillemot for the patch. Some follow up work
was done by Adiscon.
* parser(quoted-string): return the extracted value without the surrounding
quote characters.
* parser(name-value-list): add ignore_whitespaces option and accept trailing
empty trimmed values.
* parser(repeat): allow one named dot among unnamed parsers.
* fixed error callback cookie - the wrong one was provided
* hardening: fix empty-tag rulebase crash, repeat while validation crash,
parser EOF handling, and harden GitHub Actions security.
* improved CI with additional checks, including sanitizers and
an rsyslog integration test
* introduced doc for AI agents, e.g. AGENTS.md
- deleted patches
* liblognorm-2.0.6-pcre2.patch (upstreamed)
* Fri Apr 10 2026 Dirk Müller <dmueller@suse.com>
- update to 2.0.9:
* fix build issue on some platforms
* fix memory leak when a custom type in rules does not match
* fix potential segfault on some platforms
* parser(name-value-list): add separator character option
* adds new option "separator" for custom key/value pair
separation
* parser(name-value-list): add assignator option
* adds new option "assignator" for custom key/value assignment
* parser(name-value-list): fix parsing of escaped characters
* parser(name-value-list): add test for quoted values
* parser(name-value-list): improve handling of invalid pairs
* parser(CEF): fix empty last value handling
* parser(CEF): fix header and escape sequence handling
* code cleanup: removed problematic language from code base
* maintenance: fixed various misspellings in code and comments
* string rulebase bugfix: segfault when using LF in json rule
* If a json rule used a LF inside a string rule (one not loaded
* rulebase file), liblognorm segfaults.
* closes https://github.com/rsyslog/liblognorm/issues/333
* Sat Mar 15 2025 Andreas Stieger <andreas.stieger@gmx.de>
- build with pcre2, add liblognorm-2.0.6-pcre2.patch
* Mon Jan 14 2019 kukuk@suse.de
- Use %license instead of %doc [bsc#1082318]
* Mon Nov 12 2018 kdalamagkidis@suse.com
- liblognorm 2.0.6:
* added Checkpoint LEA transfer format
* added lazy matching mode to string parser
* suppress invalid param error for field name "-" for hexnumber,
float, number, date-rfc3164 and date-rfc5424
* fix cisco-interface-spec failure when at end of line
- removed liblognorm-2.0.4-no-return-in-nonvoid-function.patch
* Tue Nov 14 2017 astieger@suse.com
- liblognorm 2.0.4:
* added support for native JSON number formats
supported by parsers: number, float, hex
* added support for creating unix timestamps
supported by parsers: date-rfc3164, date-rfc5424
- add liblognorm-2.0.4-no-return-in-nonvoid-function.patch
* Fri May 05 2017 jmatejek@suse.com
- drop HTML docs and python-Sphinx dependency
- use pkgconfig always
* Tue Apr 04 2017 astieger@suse.com
- liblognorm 2.0.3:
* add ability to load rulebase from a string
* string parser did not correctly parse word at end of line
* literal parser did not always store value if name is specified
* Mon Jan 30 2017 ndas@suse.com
- This updated library is needed for latest rsyslog(fate#320546)
* Sun Dec 04 2016 astieger@suse.com
- liblognorm 2.0.2:
* bugfix: no error was emitted on invalid "annotate" line
* "annnotate": permit inline comments
* bugfix: abort in literal path compaction when using
"alternative" parser
* bugfix: lognormalizer could loop
/usr/bin/lognormalizer /usr/lib/liblognorm.so.5 /usr/lib/liblognorm.so.5.1.0 /usr/share/licenses/liblognorm5 /usr/share/licenses/liblognorm5/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 04:22:40 2026