Hi Ian, >From what you've achieved, it looks like you should be able to write a source that plays what should be recorded when something needs to be recorded, and is just unavailable otherwise. From there all you need is output.file with fallible=true. Make sure to check out the doc, in particular on how to choose filenames based on time and metadata.
Hope this helps, David
------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev
_______________________________________________ Savonet-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/savonet-users
