def process(self, event):
        if self.field in event:
            data = event[self.field]

            try:
                fields = self._decode(data)
                self.logger.debug('syslog decoded: %s' % fields)
                event.update(fields)
                if self.consume:
                    del event[self.field]

                return True
            except __HOLE__ as ex:
                self._error(event, ex)
                return False
dataset/ETHPy150Open artirix/logcabin/logcabin/filters/syslog.py/Syslog.process