I'd still be interested in having one centralized location for managing all the different elements of syslog-ng. You shouldn't necessarily have to go to different places to do this, for convenience sake anyways. How it actually gets done I'm not really concerned with yet, this is more of a requirements gathering phase for me.
I have a project at my company to replace CiscoWorks RME with Opsware NAS, and the whole reason I am involved in this php-syslog-ng stuff now is because NAS didn't have a front-end to syslog, like RME provided, and now that I have found this tool I have mitigated that requirement, my next goal is to extend the syslog analyzer functions to allow people to create event handlers. So it sounds like this functionality is built-in to syslog-ng already, I'm interested in wrapping it all into php-syslog-ng, if feasible. So the RSS stuff and the event handlers are not necessarily intertwined. I would separate them so you would have a separate area to build your filters for RSS feeds, and then another area to build your event handlers for specific events. -----Original Message----- From: Jason Taylor [mailto:[EMAIL PROTECTED] Sent: Friday, July 07, 2006 2:22 PM To: Freeman, Michael Cc: Claus Lund; [email protected] Subject: Re: [Php-syslog-ng-support] Log2rss support? Something like this might be easier to implement on the back-end syslog-ng side, and not by hitting the database. What about tools like swatch or watcher? How I see it working is creating a second "destination" in the syslog-ng config file which sends "pre-filtered" log-output to a file or socket to be u sed as input by one of these log-watcher programs. When the program sees a hit, it can create the "notify" event which could easily be configured as an event to add to an RSS feed. If you are dead-set on using the database for this, then you are not going to have "real-time" stream processing as in the above case. You will likely be running a periodic query on the database and processing that output. But in either case, what you are after is some kind of alerter service. At present, php-syslog-ng is nothing more than a log-presentation service. The alerter stuff can be added on but would be entirely separate from the front end. It would be just another consumer of the syslog-ng database. /Jason -- You can have my Mac when you pry it from my cold, dead hands. e:[EMAIL PROTECTED] v:514-815-8204 <quote who="Freeman, Michael"> > Yeah, my idea was to allow the user to build the type of filter they > wanted and underneath the hood it would make a SQL query to the DB > grabbing that stuff and generating the RSS. I'm not sure how > sophisticated my first attempt would be, but I might make a small > release and see what people think and if they find it useful, add some > of the additional things. The whole reason behind me wanting to do > this is I think while a web front end to syslog is great, it still > requires someone to look at it. I for one use RSS frequently and > always have an aggregator application open on one of my screens so it > is easy for me to look over and take notice of things I actually care > about, based on the filter/ruleset I defined for my feed. > > One could take this concept even further and extend the php-syslog-ng > interface to allow users to create rules and event handlers that would > be executed by the syslog-ng daemon itself. > > -----Original Message----- > From: Claus Lund [mailto:[EMAIL PROTECTED] > Sent: Friday, July 07, 2006 10:43 AM > To: Freeman, Michael > Subject: Re: [Php-syslog-ng-support] Log2rss support? > > > An RSS feed may be useful in some situations ... but I don't know how > well it would work/useful it would be in very "chatty environments"? > Maybe if you can do some filtering on what you subscribe to then it > could be used for alerting on certain situations that you want to make > sure you catch. > > -Claus > > > On 7/6/06, Freeman, Michael <[EMAIL PROTECTED]> wrote: > >> Is anyone else besides myself interested in getting RSS feeds from >> php-syslog-ng? I'm thinking about hacking up the log2rss stuff to >> support mySQL and use apache instead of it's own HTTP daemon in perl. >> >> Netco Government Services has recently acquired Multimax and is >> > changing its name to Multimax Inc. >> Visit http://www.multimax.com for more information. >> >> >> Note: My email address has changed. Please take a moment to update >> > your records with my new address. >> >> >> Using Tomcat but need to do more? Need to support web services, >> > security? >> Get stuff done quickly with pre-integrated technology to make your >> job >> > >> easier Download IBM WebSphere Application Server v.1.0.1 based on >> Apache Geronimo >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121 >> 6 >> 42 _______________________________________________ >> Php-syslog-ng-support mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/php-syslog-ng-support >> >> > > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your > job easier Download IBM WebSphere Application Server v.1.0.1 based on > Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=1216 > 42 _______________________________________________ > Php-syslog-ng-support mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/php-syslog-ng-support > > Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Php-syslog-ng-support mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/php-syslog-ng-support
