On Fri, Jan 31, 2014 at 6:50 AM, Nathan Brown <[email protected]> wrote:

> Fully agree that some plugins will be brain dead simple and will only
> require an incredibly small feature set of what the plugin system may
> offer. But having multiple communications options, certainly ones that
> are entirely unstructured, will be difficult to maintain. Forward
> compatibility of a plugin that may start simple but eventually will
> want to grow into something more complex is a good enough reason to
> have a structured plugin protocol. Let alone rsyslog's side that may
> increase the feature set that it can offer a plugin. JSON has proven
> it's a good candidate for this sort of thing, lightweight with decent
> native types.
>
>
IMO rsyslog is still about speed, even though we sacrifice it for the sake
of making it easy to write plugins. I agree that JSON is the most versatile
format and something to recommend for the general case. HOWEVER, there is
quite a bit of overhead associated with crafting an all-JSON representation
of a message object.

So I think we should not FORCE plugins to use JSON format. There are many
cases where this makes sense, but there are also many cases where simply
-and much faster!- formats make more sense. Given the simplicity of the
interface, I think anyone should understand what he is doing. Even more so,
for real novices, getting the JSON parser to work might be a stumbling
stone, whereas pulling pre-formatted data from stdin makes them happy.

This is why I think we should not enforce the use of JSON on the interface.

Rainer

> > On Jan 30, 2014, at 9:11 PM, David Lang <[email protected]> wrote:
> >
> > The thing is that with the rsyslog templates, you can do a lot of
> formatting and manipulation of the data before you send it to the module.
> so you should configure rsyslog to send your module whatever it can handle
> the best.
> >
> > If you have typical needs (take this entire line and send it there) you
> can get by with a very simple output module. If you have very complex
> needs, you may need to use JSON to structure things so that it's always
> clear what's what.
> >
> > the author of the output module needs to document what that module
> requires as it's input.
> >
> > overall this looks pretty good.
> >
> > David Lang
> >
> >> On Wed, 29 Jan 2014, Nathan Brown wrote:
> >>
> >> I would avoid having multiple communication options and use only line
> >> delimited JSON to talk between the plugin and rsyslog.
> >>
> >>
> >> On Wed, Jan 29, 2014 at 3:21 AM, Rainer Gerhards
> >> <[email protected]>wrote:
> >>
> >>> Hi all,
> >>>
> >>> I've written a short presentation on writing rsyslog output plugins.
> It is
> >>> targeted towards people who would like to know at least a bit about how
> >>> this works. I also plan to do an ultra-fasttrack document for those
> that
> >>> just want to get it going somehow and don't about how it works. They
> are
> >>> *not* the focus of the current presentation:
> >>>
> >>> http://www.slideshare.net/rainergerhards1/external-plugins
> >>>
> >>> I will include this information in the Fedora DevConf Talk next week,
> and
> >>> would really like your feedback. Where can we improve it, how to make
> even
> >>> more clear that it's simple. Note that I say "v8" only because it
> already
> >>> covers a bit of what we will have in a month or so (the stdout
> feedback).
> >>> When I give the presentation, I'll tell that omprog in older versions
> works
> >>> mostly the same.
> >>>
> >>> Thanks,
> >>> Rainer
> >>> _______________________________________________
> >>> rsyslog mailing list
> >>> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >>> http://www.rsyslog.com/professional-services/
> >>> What's up with rsyslog? Follow https://twitter.com/rgerhards
> >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> myriad
> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> >>> DON'T LIKE THAT.
> >> _______________________________________________
> >> rsyslog mailing list
> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >> http://www.rsyslog.com/professional-services/
> >> What's up with rsyslog? Follow https://twitter.com/rgerhards
> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
> you DON'T LIKE THAT.
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to