From owner-freebsd-hackers  Thu Feb 20 01:16:48 1997
Return-Path: <owner-hackers>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id BAA00819
          for hackers-outgoing; Thu, 20 Feb 1997 01:16:48 -0800 (PST)
Received: from david.siemens.de (david.siemens.de [146.254.1.1])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id BAA00812
          for <hackers@freebsd.org>; Thu, 20 Feb 1997 01:16:43 -0800 (PST)
Received: from salomon.mchp.siemens.de (salomon.mchp.siemens.de [139.23.33.13]) by david.siemens.de (8.8.5/8.8.0) with ESMTP id CAA08695 for <hackers@freebsd.org>; Thu, 20 Feb 1997 02:33:12 +0100 (MET)
Received: from curry.mchp.siemens.de (1@curry.mchp.siemens.de [146.180.31.23])
          by salomon.mchp.siemens.de (8.8.4/8.8.4) with ESMTP
	  id KAA12674 for <hackers@freebsd.org>; Thu, 20 Feb 1997 10:16:39 +0100 (MET)
Received: (from daemon@localhost)
	by curry.mchp.siemens.de (8.8.5/8.8.5) id KAA00285
	for <hackers@freebsd.org>; Thu, 20 Feb 1997 10:16:37 +0100 (MET)
From: Andre Albsmeier <Andre.Albsmeier@mchp.siemens.de>
Message-Id: <199702200916.KAA07489@server.us.tld>
Subject: Re: License to kill annoying syslog feature?
In-Reply-To: <199702200713.RAA08383@ogre.devetir.qld.gov.au> from Stephen McKay at "Feb 20, 97 05:13:17 pm"
To: syssgm@devetir.qld.gov.au (Stephen McKay)
Date: Thu, 20 Feb 1997 10:16:31 +0100 (MET)
Cc: hackers@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL31 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Andre Albsmeier <Andre.Albsmeier@mchp.siemens.de> wrote:
> 
> >I am very happy with the IRIX 5.3 syslog. It supports the syntax
> >
> >*.debug;kern.none;user.none     |/var/syslog/log-filter         /var/syslog/all
> >
> >which pipes all messages through /var/syslog/log-filter and this script
> >decides what to do with them. So I get my squid, socks, slip, etc. logs
> >all in different files and can for example ignore some messages with
> >the same level and priority depending on the process that sends them.
> 
> Shouldn't we add better log filtering to syslogd instead?  Its function
> should be to accept messages, discard unnecessary ones, and log the required
> ones to the appropriate log files.  If it is not up to this task, and we
> add a shell filter escape, isn't that the same thing as saying that syslogd
> is bogus and useless?
> 
> Add some new syntax supporting arbitrary regular expressions.  That should
> be enough for everyone.

Yes, that's right. I just wanted to show the interest in a flexible syslogd.
The implementation is a different thing.

	-Andre