[Bug][FileLog] Incorrect parsing of syslog message

[marcinsiennicki95]

Component(s)

filelog

What happened?

Description

I want to parse syslog message to get structured logs
<30>Feb 6 18:30:21 localhost bmd[8505]: {"datetime":"2022-02-06T18:30:21.3775554+00:00","message":"End processing HTTP request after 800ms - 200","level":"Error","messageproperties":{"ElapsedMilliseconds":800,"StatusCode":200}}

Steps to Reproduce

Process .log file

Expected Result

{
	"resourceLogs": [
		{
			"resource": {},
			"scopeLogs": [
				{
					"scope": {},
					"logRecords": [
						{
!!!!!! Here lack of timestamp 
							"observedTimeUnixNano": "1675707576659830277",
							"body": {
								"kvlistValue": {
									"values": [
										{
											"key": "priority",
											"value": {
												"intValue": "30"
											}
										},
										{
											"key": "severity",
											"value": {
												"intValue": "6"
											}
										},
										{
											"key": "hostname",
											"value": {
												"stringValue": "localhost"
											}
										},
										{
											"key": "appname",
											"value": {
												"stringValue": "bmd"
											}
										},
										{
											"key": "proc_id",
											"value": {
												"stringValue": "8505"
											}
										},
										{
											"key": "timestamp",
											"value": {
												"stringValue": "0000-02-06 18:30:21 +0000 UTC" **Good timestamp** 
											}
										},
										{
											"key": "facility",
											"value": {
												"intValue": "3"
											}
										},
										{
											"key": "message",
											"value": {
												"stringValue": "{\"datetime\":\"2022-02-06T18:30:21.3775554+00:00\",\"message\":\"End processing HTTP request after 800ms - 200\",\"level\":\"Error\",\"messageproperties\":{\"ElapsedMilliseconds\":800,\"StatusCode\":200}}"
											}
										}
									]
								}
							},
							"attributes": [
								{
									"key": "log.file.name",
									"value": {
										"stringValue": "syslog_lucid.log"
									}
								},
								{
									"key": "log.file.path",
									"value": {
										"stringValue": "/var/log/syslog_lucid.log"
									}
								}
							],
							"traceId": "",
							"spanId": ""
						}
					]
				}
			]
		}
	]
}

Actual Result

Added !!! to indicate my suspicion of a possible error with parsing

{
	"resourceLogs": [
		{
			"resource": {},
			"scopeLogs": [
				{
					"scope": {},
					"logRecords": [
						{
!!!!!! Here lack of timestamp 
							"observedTimeUnixNano": "1675707576659830277",
							"body": {
								"kvlistValue": {
									"values": [
										{
											"key": "priority",
											"value": {
												"intValue": "30"
											}
										},
										{
											"key": "severity",
											"value": {
												"intValue": "6"
											}
										},
										{
											"key": "hostname",
											"value": {
												"stringValue": "localhost"
											}
										},
										{
											"key": "appname",
											"value": {
												"stringValue": "bmd"
											}
										},
										{
											"key": "proc_id",
											"value": {
												"stringValue": "8505"
											}
										},
										{
											"key": "timestamp",
											"value": {
												"stringValue": "0000-02-06 18:30:21 +0000 UTC" !!!!!!!!!!!!!!!! Here problem with timestamp
											}
										},
										{
											"key": "facility",
											"value": {
												"intValue": "3"
											}
										},
										{
											"key": "message",
											"value": {
												"stringValue": "{\"datetime\":\"2022-02-06T18:30:21.3775554+00:00\",\"message\":\"End processing HTTP request after 800ms - 200\",\"level\":\"Error\",\"messageproperties\":{\"ElapsedMilliseconds\":800,\"StatusCode\":200}}"
											}
										}
									]
								}
							},
							"attributes": [
								{
									"key": "log.file.name",
									"value": {
										"stringValue": "syslog_lucid.log"
									}
								},
								{
									"key": "log.file.path",
									"value": {
										"stringValue": "/var/log/syslog_lucid.log"
									}
								}
							],
							"traceId": "",
							"spanId": ""
						}
					]
				}
			]
		}
	]
}

Collector version

0.70

Environment information

No response

OpenTelemetry Collector configuration

receivers:
  filelog:
    include:
      - /var/log/*.log
    start_at: beginning
    include_file_path: true
    include_file_name: true
    operators:
      - type: syslog_parser
        protocol: rfc3164
        parse_to: body

Log output

No response

Additional context

No response