This proposal is for changing the current logging to log using syslog format as defined in RFC5424 as defined at https://datatracker.ietf.org/doc/html/rfc5424.  This will make the logs exportable to log aggregators/SIEM systems. ODIM will not be exporting the mail to external systems directly but logging to local files. The transport mapping/transmission functions can be performed by externals actors like syslog daemon or 3rd party adapters. Sites that want different formats that are specific to their requirement may do so using either syslog exporters or third party adapters. 

Current proposal it to implement user-level(1) and security/authorization(4/10) for facility. The rest maybe added in future as required.

  • No labels