rsyslog

rsyslog solves the problem of Drupal's internal logging generating complex, pipe-delimited strings that are difficult to parse in modern visualization tools.

rsyslog acts as a crucial translation layer in the observability stack, sitting between the PHP application backend and the centralized logging infrastructure to transform log events.

rsyslog listens for incoming PHP log events, strips away unnecessary formatting, and cleanly formats the payload into a structured JSON object, separating severity, timestamp, and message body.

Transforming Drupal logs into JSON with rsyslog enables seamless ingestion into Grafana Loki, unlocking advanced LogQL querying and turning raw text into actionable business intelligence for tracking metrics like page render times and backend user actions.

STD.DEV implemented a custom rsyslog configuration to achieve higher quality monitoring by transforming Drupal's difficult-to-parse log strings into a queryable JSON format.

rsyslog processes Drupal's standard pipe-delimited syslog messages, which are raw PHP output.

Grafana is mentioned as a visualization tool that benefits from the JSON transformation of Drupal logs, enabling advanced LogQL querying.