On 20.10.2013 04:15, Botond Botyanszki wrote:

> There were several earlier suggestions regarding the snare format
> produced by to_syslog_snare() and all that is not forgotten. It's 
> just
> that polishing the snare format isn't top priority since it is an old
> looser format that the world is moving away from and there are far 
> more
> important features which are important to the users of nxlog.

You know, I have been thinking about this and I think you might be 
losing out on an opportunity here. I have not seen the migration away 
from Snare that you might expect now that Windows has structured 
logging. I still see it as the go-to format for Windows logging. This is 
being driven by the applications that consume the logs and the service 
providers that provide for log monitoring capabilities. Having a fully 
Snare compatible format would allow you to complete in that space. Best 
of all, since nxlog is an end-to-end, modular solution, it can be seen 
as a one-size-fits-all logging solution. There are lots of companies 
that have Snare agents for the expensive SIEM or service provider and 
maybe also another agent for less critical systems. Nxlog could be used 
for both, but right now it may not work with the SIEMs and log 
providers, depending on what they are expecting. Just some food for 
thought.

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users

Reply via email to