On Tue, Jul 8, 2008 at 1:29 AM, Craig Small <[EMAIL PROTECTED]> wrote:
> On Mon, Jul 07, 2008 at 08:34:09PM -0400, Kyle Gonzales wrote:
> > I like that idea. I would think it would be easier to use something like
> > rsyslog, put the logs into a MySQL or PostgreSQL database (you need this
> for
> > JFFNMS anyway) then do a database query of the logging database to
> coincide
> > with the normal poller.
> The current setup can send syslog messages into a database table
> already. The problem is it sends *everything* into the database.
> You get two copies; one int the raw syslog table and then another in the
> events field. It's a big problem where you have high-volume of syslog
> messages.
>
> What I was going to do is to scan the specified logfiles and then
> match stuff off that to create events. If a line doesn't match no
> record is created.
>
Understood. In the case of rsyslog, the "scan" would be a database call to
the database used by rsyslog. You could do the same thing, perhaps with
more efficiency.
I guess I should explain my ulterior motive. :) Eventually, I would like
for people to be able to view recent log events for a system/device by
peering into a logging database from JFFNMS. Rsyslog has a web-based log
viewer now, but really often when you are looking for why a system alerted
you or why CPU has spiked or whatever, being able to look into the logs in
the same place could be useful. Maybe even a "last 10 logs" could be
integrated into the dashboard for a device.
Of course, not eveyone will be using rsyslog or want to log to a database,
so your work is going to be more valuable overall. I am going to dig into
rsyslog shortly, and then see how these can be integrated.
My other motivation is replacing the msyslog support with rsyslog, as
msyslog appears to be a dead project.
--
Kyle Gonzales
[EMAIL PROTECTED]
GPG Pub Key: 9C3FBD51
Read My Tech Blog:
http://techiebloggiethingie.blogspot.com/
-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
jffnms-users mailing list
jffnms-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jffnms-users
