I have had a look at the syslog MIB, and am confused, at a fairly fundamental level, about the relationship of the MIB to the other documents, RFC3164 and syslog-protocol. The last two have a common framework/architecture, spelt out at the beginning of each, with a common terminology of device, relay, collector, server. The MIB is different.
Thus, it is a device MIB (not a protocol MIB) (quoting) 'to monitor a group of syslog devices' and 'One or more syslog devices which may be on the same host'. '"facilities" generate messages indicating their own status or the occurance of events. These messages are handled by what has come to be known as the syslog process or device' Which leaves me with the impression of a loosely-coupled system of hosts communicating via proprietary protocols with multiple instances of a syslog daemon per host forwarding messages onward. Really? could be but I think I am lost here and that the introduction should be recast in the language of RFC3164/syslog-protocol (even if it is intending to convey the above). Tom Petch _______________________________________________ Syslog mailing list [email protected] https://www1.ietf.org/mailman/listinfo/syslog
