feat: vendor device proprietary log format parser #43

New issue

Open

opened 2026-05-26 23:05:24 -07:00 by pyr0ball · 0 comments

pyr0ball commented

2026-05-26 23:05:24 -07:00

Owner

Add a Turnstone log parser for vendor device log files.

Some devices emit a proprietary structured log format distinct from journald JSON, syslog, or Docker stdout. A parser is needed to:

Detect these log files by format signature (header, line structure)
Extract timestamp, severity, device ID, module, and message fields
Normalize to Turnstone's internal RetrievedEntry format for FTS5 indexing
Handle multi-line continuation lines and stack/trace blocks
Emit a warning (not crash) on unrecognized lines

Add a Turnstone log parser for vendor device log files. Some devices emit a proprietary structured log format distinct from journald JSON, syslog, or Docker stdout. A parser is needed to: - Detect these log files by format signature (header, line structure) - Extract timestamp, severity, device ID, module, and message fields - Normalize to Turnstone's internal `RetrievedEntry` format for FTS5 indexing - Handle multi-line continuation lines and stack/trace blocks - Emit a warning (not crash) on unrecognized lines