Syslog to JSON Converter - Parse System Logs Online

Convert syslog format to structured JSON. Parse RFC 3164 and RFC 5424 system logs with priority, facility, and timestamp extraction.

Drop syslog file here or click to browse

.log, syslog, messages files

Syslog Input

JSON Output

CLF to CSV Converter - Common Log Format…

View all Logs parsers →

Frequently Asked Questions

Syslog is the standard logging protocol for Unix/Linux systems, defined in RFC 3164 (BSD) and RFC 5424 (modern). It captures system events with priority, facility, and timestamp.

Both RFC 3164 (traditional BSD syslog) and RFC 5424 (structured syslog) formats. The parser auto-detects the format from the message structure.

Priority (PRI), facility, severity level, timestamp, hostname, application name, process ID (if present), and message content.

Facilities identify the source: kern (0), user (1), mail (2), daemon (3), auth (4), syslog (5), lpr (6), news (7), and more up to local7 (23).

From 0-7: Emergency, Alert, Critical, Error, Warning, Notice, Informational, Debug. Lower numbers are more severe.

Common locations: /var/log/syslog (Debian/Ubuntu), /var/log/messages (RHEL/CentOS), or configured in /etc/rsyslog.conf.

Yes. All parsing happens locally in your browser. System logs containing hostnames and potentially sensitive events never leave your device.

Export journald to syslog format first using: journalctl -o syslog > exported.log

Lines that don't match syslog patterns are stored in an 'unparsed' array in the JSON output.

PRI = (facility * 8) + severity. For example, PRI 38 = daemon (3) facility, informational (6) severity.

Related Tools