On Tue, 2009-12-29 at 07:13 +0800, John Summerfield wrote: > McKown, John wrote: > > Which syslog daemon are you running (sorry, no z/Linux here). Old-style > > syslog, syslog-ng, or rsyslogd? They are different in their capabilities. > > > > One thing which should work on all of them is to make your own daemon which > > monitors the appropriate syslog file in the filesystem (you must tell the > > syslog to write to this file). You could do this something like: > > > > tail -f /var/log/log-file-with-messages | myprocessing-program > > Probably, configuring syslogd to write to a pipe is easier. Start the > pipe reader first. > > Apart from things others have mentioned, pop-before-smtp is a perl > script that reads log files in real time and does things when a regex > matches. It copes with logs being rotated. > > As its name suggests, it's mail-related, but one could hack it to death > and reincarnation.
One would hope these days they would use inotify - haven't looked at that perl but I know "tail -f" doesn't. Run strace over it for a while ... Shane ... ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
