Drew Hawn <[EMAIL PROTECTED]> wrote:
> Thanks for the info Charles, but I'm confused. How do most of you folks
> pull out information from your logs?
With qmail-analog, tai64nlocal, and "less", in my case. Most people here
probably use something similar.
> Log files generated by qmail are unreadable/unusable in the current
> (multilog) format.
tai64n timestamps aren't supposed to be human readable. They're supposed to
be easily parsable by programs. That's the whole point of tai64nlocal -- you
log with tai64n timestamps, and if you want to read the log with
human-readable timestamps, you do:
tai64nlocal < log | pager_of_choice
Don't run the logs through tai64nlocal before they hit the disk.
> In order for them to make sense to me, and in order to sift them for
> specific dates I have to convert them to human readable format.
No, it's much simpler than that. A program to filter a log with tai64nlocal
timestamps for particular dates is trivial; Bruce's qlogtools probably
includes one (though I haven't checked). After you've filtered them, you run
it through tai64nlocal before reading it.
> Once I have removed data that is not pertinent I then have to change them
> back into multilog format using tai64n, and then convert them into the older
> TAI64 format that qmailanalog understands, then run them through the
> qmailanalog scripts.
Don't remove any data. What isn't pertinent? qmail-analog needs all of the
various data that qmail-send logs to be able to accurately summarize it.
Charles
--
-----------------------------------------------------------------------
Charles Cazabon <[EMAIL PROTECTED]>
GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/
Any opinions expressed are just that -- my opinions.
-----------------------------------------------------------------------
