Alan wrote:
I frequently need to compare two syslog type files from different machines.
I'm in search of a solution to help me do this.
Ideally, I'd like to be able to intersperse the two files into one display
with color coding.
Something like:
*Blue* 2007/05/01 07:38:46 System 1 event.
*Red* 2007/05/01 07:39:23 System 2 event.
*Blue* 2007/05/01 07:45:18 System 1 event.
*Blue* 2007/05/01 07:48:58 System 1 event.
*Red* 2007/05/01 07:56:38 System 2 event.
I don't really need the changes between them ala diff, I need to be able
to see them both at the same time. Side by side display would be ok, as
long as the timestamps could be reasonably matched up.
A bonus would be if the program could "adjust" the timestamps for those
systems whose clocks are not in sync.
You think about running syslog-ng on a single machine, taking the logs
from the 2 remote machines ?
You can then use the NG facilities to put the ASCII "blue/red" in front
of the log files being written to file/screen
--
Michael O'Keefe | [EMAIL PROTECTED]
Live on and Ride an 06 BMW R12GS HP2 | [EMAIL PROTECTED] / |
I like less more or less less than |Work:+1 858 845 3514 / |
more. UNIX-live it,love it,fork() it |Fax :+1 858 845 2652 /_p_|
My views are MINE ALONE, blah, blah, |Home:+1 760 788 1296 \`O'|
blah, yackety yack - don't come back |Fax :+1 858 _/_\|_,
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
