Formats (v1)

Version 1 ships three formats. There is no json-lines and no custom patterns; those arrived in version 2.

Limits#

• Time is always UTC, even when no zone is given.
• syslog uses the current year.
• logfmt values stay strings: rec.data.ms is '812', not 812.

A custom format through a function#

If your format is not listed, pass a parsing function:

const parser = sverlo.parser({
  format: (line) => {
    const m = /^(\S+) (\w+) (.*)$/.exec(line);
    return m ? { time: m[1], severity: m[2].toUpperCase(), message: m[3], data: {} } : null;
  }
});

The function must return a record object or null. A regular expression with nested quantifiers can hang on a long line, which is why v2 replaced regular expressions with patterns.