Syslog Priority Field Decoder / Lookup

If you are accepting syslog directly into Splunk, and have no_priority_stripping = true to get the priority, this app will extract it into the syslog_priority field. It will then use the included lookup file to create two new fields, syslog_facility and syslog_severity for you. It currently runs automatically only on data with a source of udp:514. Edit as necessary.