I'm sending Horizon logs to a syslog server.
I have some parsing error message on my syslog server:
Error processing log message: <166>1 2021-08-19T21:33:47.549+02:00 hz-conserve03.ptg.sys.inf.rtbf.be View - 12004 [View@6876 Severity="INFO" Module="Broker" EventType="TIMING_PROFILER_GET_CONFIGURATION" BrokerName="HZ-CONSERVE03" BrokerSessionId="25ac059a_91ba_41cd_b5ea_2ccdddfb6e6d" ActionId="47ede95d-4b13-473b-8a77-e9b1be967365" TimingProfilerType="GetConfigurationTimingProfiler" TimingProfilerDuration="2" TimingProfilerTree="{>@<"v1":{"s":"2021-08-19T21:33:47.547+0200","d":2,"u":0,"e":"2021-08-19T21:33:47.549+0200","authentication":{"s":"2021-08-19T21:33:47.547+0200","d":2,"u":2,"e":"2021-08-19T21:33:47.549+0200"}}}"] Get configuration timing profile on HZ-CONSERVE03, duration: 2
Following the Syslog RFC 5424 (https://datatracker.ietf.org/doc/html/rfc5424), in the structured-data parameter value, characters '"' MUST be escaped. Which is not seem to be the case here.
Is my analyse correct?
Do you think it can be fixed in the futur?
Horizon version: 7.13.1
Syslog version: syslog-ng 3.23
