LOGNORMALIZER(1)

💖 LOGNORMALIZER — like, the manual page, but make it make sense 💖

okay bestie, sit down, hydrate, because we're about to talk about lognormalizer, a lil User Command from the ✨ lognormalizer 2.0.6 ✨ era (June 2022, if you're keeping track 🎀).

🌸 NAME 🌸

lognormalizer — the girl whose whole job is testing and debugging liblognorm rulebases 💅

✨ OPTIONS ✨

okay this is the main character section, no skimming, we're reading all of it fr fr 👑

• -r<rulebase> — the rulebase you wanna use. this one is REQUIRED, like not optional, like the party does not start without it, periodt.
• -H — prints a lil summary line for you: the nbr of msgs Handled 🫶
• -U — prints the number of unparsed messages. and like, only if it's non-zero, because we're not doing unnecessary noise here.
• -e<json|xml|csv|cee-syslog|raw> — switches up the output format. default is json, obviously. and raw is exactly like the input, no filter, no makeup, just vibes. super useful when you pair it with -p/-P to extract your known good/bad messages 🔥
• -E<format> — encoder-specific format. this one's for CSV, so go read the docs, bestie, i'm not playing 📚
• -T — includes 'event.tags' in JSON format. cute lil tags, we love her.
• -oallowRegex — allows regexp matching. but read the docs about the performance penalty first, it's giving consequences 😭
• -oaddRule — adds a mockup of the matching rule. a lil fakeout, for science 🧚
• -oaddRuleLocation — adds the location of the matching rule to metadata. so you know where it lives 🏠
• -oaddExecPath — adds the exec_path attribute to output.
• -oaddOriginalMsg — always adds the original message to output, not just in the error case. clingy in the best way 💜
• -p — print back only if the message has been parsed successfully. a lil filter, a lil slay ✨
• -P — print back only if the message has NOT been parsed successfully. the flop detector, we stan 🫶
• -L — adds source file line number information to unparsed line output. receipts, basically 🧾
• -t<tag> — print back only the messages matching the tag. tag-specific girlies only 💅
• -v — print debug. and when you use it 3 times, it prints the parse DAG. yes, three. count them. no cap.
• -V — print version information. identity check ✔️
• -d — print DOT file to stdout and exit. that's it, that's the whole thing, bye 👋
• -d<filename> — save the DOT file to the filename instead. same energy, different destination.
• -s<filename> — print parse dag statistics and exit 📊
• -S<filename> — print extended parse dag statistics and exit. and yes, it includes -s, so it's the deluxe version, the upgraded package, the ✨iconic✨ one.
• -x<filename> — print statistics as a dot file (called only). lowercase energy, very specific purpose 🎀

and that's the whole page, bestie!! this was lognormalizer 2.0.6, dated June 2022, from the User Commands corner of the manual-verse 🌈 go parse something good, drink water, and remember: if your messages aren't parsing, it's not you, it's the rulebase 💖✨🦋