Details
Description
SpringXD's syslog source cannot parse rfc5424 messages into a Map.
For the messages we get in RFC 3164, springXD converts these to a Map.
Since the rfc5424 data cannot be interpreted then the map contains just one key called 'UNDECODED'.
The result of this is that we get a string that looks like this (when we convert the message to a String)
{UNDECODED=<182>Dec 02 2014 07:56:35: %ASA-6-113008: AAA transaction status ACCEPT : user = jbloggs}
Should be something like this (note the values below are for illustrative purposes only and should not be used as test data)
{FACILITY=22, SEVERITY=6, TIMESTAMP=Tue Dec 02 07:56:35, HOST=the-hostname-that-sent-the-data, TAG=%ASA-6-113008, MESSAGE=........}
Root Cause
Spring integration does not parse these messages. There is a JIRA for SI here:
https://jira.spring.io/browse/INT-3450