Processor

LOGPLEX = ENV["CL_LOGPLEX"]? || ""

LOOKUP_HASH = {"Jan" => 1, "Feb" => 2, "Mar" => 3, "Apr" => 4, "May" => 5, "Jun" => 6, "Jul" => 7, "Aug" => 8, "Sep" => 9, "Oct" => 10, "Nov" => 11, "Dec" => 12}

TAG_TOKENIZER = "."

TIME_SEGMENT = "%Y-%m-%dT%H:%M:%S"

TOKEN = ENV["CL_TOKEN"]?

VERSIONS = [:syslog, :rsyslog_micro, :rsyslog_full, :rsyslog_plus, :syslog_5424]

build_date(month : String, day : String, time : String)

determine_format(data : String) : Hash(Symbol, Array(String))

get_facility_from_segment(segment : String)

get_timestamp_from_segment(segments : Array(String))

normalize(segments : Array(String)) : SyslogData

normalize_data(log_type : Symbol, segments : Array(String)) : SyslogData

process(data : String) : SyslogData | Nil

split_data(data : String) : SyslogData

validate_tag(tag)