Date: Thu, 20 Feb 1997 22:54:40 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: freebsd-hackers@freebsd.org Subject: Re: License to kill annoying syslog feature? Message-ID: <Mutt.19970220225440.j@uriah.heep.sax.de> In-Reply-To: <199702200713.RAA08383@ogre.devetir.qld.gov.au>; from Stephen McKay on Feb 20, 1997 17:13:17 %2B1000 References: <199702200713.RAA08383@ogre.devetir.qld.gov.au>
next in thread | previous in thread | raw e-mail | index | archive | help
As Stephen McKay wrote: > >I am very happy with the IRIX 5.3 syslog. It supports the syntax > > > >*.debug;kern.none;user.none |/var/syslog/log-filter /var/syslog/all > Shouldn't we add better log filtering to syslogd instead? That wouldn't have helped me, however. That's why i remembered IRIX, and implemented the subprocess pipe stuff for syslogd. To make the picture short: A customer suffers from a bug in his telecommunications equipment. Unfortunately, this one has been made by the ``German IBM'', thus it's expensive, and said company is unflexible enough so nobody hopes for a bugfix within the next two or three years. Now, they've got a router that jams whenever the telco experiences this bug. This router logs to that FreeBSD machine, and the jamming is detectable by making educated guesses on the logged messages. To do this, i pipe the log messages of some facility into a Perl script, which in turn telnets to the router if it detects the failure condition, and simply reboots the router. It's a gross solution, but it had the advantage that it works, and that it doesn't depend on anybody else (so it was available within a week). > Add some new syntax supporting arbitrary regular expressions. That should > be enough for everyone. Show me how you would solve my problem with arbitrary regular expressions. You win a prize. :-) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Mutt.19970220225440.j>