On Jan 20, 2014, at 4:24 PM, David Lang <[email protected]> wrote: > On Mon, 20 Jan 2014, Radu Gheorghe wrote: > >> I'm not saying rsyslog shouldn't do flexibility. I think it's uberimportant >> and it's worth investing in. I'm saying we should go with one of the >> directions where rsyslog is pushed to that: >> - is already partially accomplished (so it's credible) >> - has the potential to go >> - last but not least, where we want it to go :) >> >> I thought something that includes the words fast, light and processing will >> do, given the history of rsyslog and where it seems to go now with v8. > > I see rsyslog as being the core of a logging system, it gathers logs from > (almost) anything, and delivers them to (almost) anything. It can modify and > filter the messages along the way.
This is similar to my own "customer testimonial." The three main reasons I switched to rsyslog are: 1) Much higher performance. 2) It has DAQ, detailed pstats, TLS, RELP, and now log-signing support so it's reliable in the sense that logs that get in are not going to get lost someplace mysteriously. (Even drops outside your control become manageable/correctable.) 3) Property replacement, JSON, and filtering, allow you to modify and route logs as you like. Going with the R-theme (since 'R' initially meant Reliable) that gives me: * Reliable * Rapid * Routing (Back to the logo: borrowing from another of Rainer's interests that I happen to share, maybe R is for Rocket [with apologies to Ray Bradbury].) Contrast this with logstash, which is extremely flexible: it can connect just about any input to just about any output, like pipe/grep/awk/etc. for log streams. It's a "log format translator", but not necessarily a high-performance "log router". - Dave _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

