Changes:
* added -t option to normalizer so that only messages with a specified
tag will be output
* bugfix: abort if a tag was assigned to a message without any fields
parsed out (uncommon scenario)
* bugfix: mem leak on parse tree destruct - associated tags were not deleted
* bugfix: potential abort in normalizer due to misadressing in debug
message generation
Briefly described, liblognorm is a tool to normalize log data.
People who need to take a look at logs often have a common problem.
Logs from different machines (from different vendors) usually have
different formats for their logs. Even if it is the same type of log
(e.g. from firewalls), the log entries are so different, that it is
pretty hard to read these. This is where liblognorm comes into the game.
With this tool you can normalize all your logs. All you need is liblognorm
and its dependencies and a sample database that fits the logs you want
to normalize.