That's great, thanks to Jonathan and everyone else who replied. Some interesting stuff in there.
On 01/05/2013 11:00, "[email protected]" <[email protected]> wrote: >Send varnish-misc mailing list submissions to > [email protected] > >To subscribe or unsubscribe via the World Wide Web, visit > https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc >or, via email, send a message with subject or body 'help' to > [email protected] > >You can reach the person managing the list at > [email protected] > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of varnish-misc digest..." > > >Today's Topics: > > 1. RE: Varnishlog and Splunk ([email protected]) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Tue, 30 Apr 2013 13:29:30 +0000 >From: <[email protected]> >To: <[email protected]> >Subject: RE: Varnishlog and Splunk >Message-ID: > > <8e656b642592b942ae317e2afae0aba13f9be...@uk2p-erfmmbx10.erf.thomson.com> > >Content-Type: text/plain; charset="utf-8" > >Hi Graham, > >Splunk didn?t care with separate lines or not, it?s all about regexp. You >can setup your Splunk events by adding any separator you want. It can be >a line feeds or any separator (ReqStart/ReqEnd) >Currently, we?re fetching records (about 10 lines for each record) using >Splunk without any issues. > >However, I will suggest you to use varnishncsa instead of varnishlog >because the main purpose of ncsa is to write one line for each requests. >You can setup the ?-F ? option to add more HTTP headers if needed. > > >Jonathan Huot >Phone: +33(0)1.47.62.78.65 > >From: [email protected] >[mailto:[email protected]] On Behalf Of Graham Lyons >Sent: jeudi 25 avril 2013 12:16 >To: [email protected] >Subject: Varnishlog and Splunk > >Hello, > >Has anyone had any experience of putting output from varnishlog into >Splunk? My experience of Splunk so far has involved access log type >sources with events on separate lines, which is obviously quite different >to what comes out of varnishlog. > >If there's any prior art it would interesting to hear. > >Thanks, >Graham. > > > >---------------------------- > >http://www.bbc.co.uk >This e-mail (and any attachments) is confidential and may contain >personal views which are not the views of the BBC unless specifically >stated. >If you have received it in error, please delete it from your system. >Do not use, copy or disclose the information in any way nor act in >reliance on it and notify the sender immediately. >Please note that the BBC monitors e-mails sent or received. >Further communication will signify your consent to this. > >--------------------- > >This email was sent to you by Thomson Reuters, the global news and >information company. Any views expressed in this message are those of the >individual sender, except where the sender specifically states them to be >the views of Thomson Reuters. >-------------- next part -------------- >An HTML attachment was scrubbed... >URL: ><https://www.varnish-cache.org/lists/pipermail/varnish-misc/attachments/20 >130430/f029e1dd/attachment-0001.html> > >------------------------------ > >_______________________________________________ >varnish-misc mailing list >[email protected] >https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc > >End of varnish-misc Digest, Vol 86, Issue 1 >******************************************* ----------------------------- http://www.bbc.co.uk This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system. Do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. ----------------------------- _______________________________________________ varnish-misc mailing list [email protected] https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
