[Syslog-sec] Message ID in the header

["Rainer Gerhards" <rgerhards@hq.adiscon.com>]

Hi list,

finalizing syslog-protocol, I realized that SENDER-NAME/-INST is
actually NOT really what TAG was. One usage of TAG was to provide the
SENDER-NAME/-INST information. But it also had an other use: It often
served as a message ID (something like "PIX-3333-3"). We do NOT (yet)
have anything like a message ID in the message header. At least for me,
I was so focussed on the new semantics that I overlooked the other
common use for TAG.

So we have another issue: do we need to include a message ID in the
header? Should we drop it altogether? Or should we add an defined
structured data ID?

Comments are appreciated.

Rainer
_______________________________________________
Syslog-sec mailing list
Syslog-sec@www.employees.org
http://www.employees.org/mailman/listinfo/syslog-sec