Re: [bazsi@balabit.hu: ADMIN request]

[Volker Wiegand]

On Wed, 20 Oct 1999, der Mouse wrote:

 > >>>  - Compression of equal/similar(?) lines at the originating host.
 > >> This should be accomplished with a repetition count assigned to
 > >> messages.  "Last message repeated NNN times" make it quite difficult
 > >> to find the original message.
 > 
 > ...huh?  It's the last line before the "last message repeated" lines.
 > 
Hmmm, this helps you only for local messages. The moment you start mixing
syslog messages from different hosts on your central loghost, you won't be
able to associate the messages any more.

The clever way out of this might be the mandatory inclusion of a sequence
number and reference to this number in the repeat message.

Volker