Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 07 May 2008 00:31:46 +0200
From:      =?ISO-8859-1?Q?Martin_Sch=FCtte?= <lists@mschuette.name>
To:        hackers@freebsd.org
Subject:   Re: Improving Syslog
Message-ID:  <4820DC52.9070901@mschuette.name>
In-Reply-To: <20080506171525.O52391@fledge.watson.org>
References:  <481B7ED4.3020208@mschuette.name> <20080506171525.O52391@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson schrieb:
> managed if done carefully.  I'm not sure if you've looked at Apple's 
> extended syslog, which among other things, includes a binary log file 
> format making it more mechanically searched and managed, do take a look 
> if you haven't.

I read the asl man pages 
(http://developer.apple.com/DOCUMENTATION/Darwin/Reference/ManPages/man3/asl.3.html) 
because I am looking for an API to support the new fields in 
syslog-protocol.
I liked the approach of adding different attributes to a message object, 
I think that would work well for structured data parametern.
But the asl functions would have to be extended for syslog-protocol 
because they do not use namespaces for the key=value pairs.

The log storage and filter mechanisms are interesting, but IMHO out of 
scope for a basic syslogd.
If desired one could probably write a small tool to use an indexed BDB 
for storage and attach it with a pipe to syslogd.

-- 
Martin



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4820DC52.9070901>