the biggest problem that I run in to while processing logs in name-value pairs is that people repeat the same name in multiple places in the log and count on context/ordering to figure out what is related to what.
any logfmt library should produce at least a warning if the same name is used multiple times.
I would also suggest that when including related pieces of info, a hierarchy be used (and it would be good to define a 'standard' deliminator to use, '.' and '!' are common, but a 'standardized' recommendation is a good idea.
for example
source.hostname source.ip source.port are clearly related and distinct from dest.hostname dest.ip dest.port
'.' as deliminator has the advantage that it can trivially be ignored by pretty much everything, '!' as deliminter has the advantage that it's extremely unlikely to be used by accident. both are in reasonably common use by different programs.
I'm not submitting this as a PR because the issue is a strategic/policy question, not a simple mistake, but if you would like to to do so, I will.
the biggest problem that I run in to while processing logs in name-value pairs is that people repeat the same name in multiple places in the log and count on context/ordering to figure out what is related to what.
any logfmt library should produce at least a warning if the same name is used multiple times.
I would also suggest that when including related pieces of info, a hierarchy be used (and it would be good to define a 'standard' deliminator to use, '.' and '!' are common, but a 'standardized' recommendation is a good idea.
for example
source.hostname source.ip source.port are clearly related and distinct from dest.hostname dest.ip dest.port
'.' as deliminator has the advantage that it can trivially be ignored by pretty much everything, '!' as deliminter has the advantage that it's extremely unlikely to be used by accident. both are in reasonably common use by different programs.
I'm not submitting this as a PR because the issue is a strategic/policy question, not a simple mistake, but if you would like to to do so, I will.