On Mon, Jul 07, 2008 at 08:34:09PM -0400, Kyle Gonzales wrote: > I like that idea. I would think it would be easier to use something like > rsyslog, put the logs into a MySQL or PostgreSQL database (you need this for > JFFNMS anyway) then do a database query of the logging database to coincide > with the normal poller. The current setup can send syslog messages into a database table already. The problem is it sends *everything* into the database. You get two copies; one int the raw syslog table and then another in the events field. It's a big problem where you have high-volume of syslog messages.
What I was going to do is to scan the specified logfiles and then match stuff off that to create events. If a line doesn't match no record is created. - Craig -- Craig Small GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5 http://www.enc.com.au/ csmall at : enc.com.au http://www.debian.org/ Debian GNU/Linux, software should be Free ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ jffnms-users mailing list jffnms-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jffnms-users
