On Fri, Jun 09, 2006 at 12:12:33PM -0400, James Carlson wrote: > Instead, syslog is a great dumping ground for all sorts of debug and > human-only messages, and will likely be treated that way indefinitely. > I would oppose an effort to apply structure on top of something that > is inherently without structure.
Are you speaking of the protocol? The IETF SYSLOG WG is chartered to, among other things, add room in the protocol for structured messages: " - A document will be produced that describes a standardized syslog protocol. A mechanism will also be defined in this document that will provide a means to convey structured data. " draft-ietf-syslog-protocol-16.txt is a draft for such a document. See section 6. So, I think syslog may be the right protocol. But the log _files_ that our current syslog daemon produces probably aren't :) Nico --
