Raffy posted a nice summary of some of the recent discussions we've been involved lately. One interesting point was that when talking about log standards, "people are intermixing a lot of different topics." Specifically:
"a) Log format (syntax)
b) Event transport
c) Event classification (also called taxonomy, categorization, grammar)
d) Logging recommendations (what events specific devices should report AND what fields they should contain as a minimum [which some peple call 'scope of what to log']"
And, there are a few promising efforts underway to address that... fun stuff indeed.