tclsyslogd a fully functioning, BSD-standard syslogd, augmented by a Tcl interpreter. Each time a message is received, a proc called syslog is invoked with an argument being the name of an array containing the syslog message as key-value pairs.

Using tclsyslogd you have the full power of the Tcl scripting language to examine every syslog message pre-parsed into its component fields, coding decisions and actions in a flexible, well-known, reusable language.

The elements of the passed array are as follows:

• clock – the current time as epoch seconds
• timestamp – the text timestamp from the syslog message
• from – the host that issued the message
• facility – the facility name, if it can be decoded, else the facility number
• priority – the priority name, if it can be decoded, else the priority number
• program – the name of the program that issued the message
• kernel – if the message was issued by the kernel, this field will be present, with the value being the name of the boot file or the word “kernel” depending on how syslogd is configured.
• msg – the undecoded message