[prev in list] [next in list] [prev in thread] [next in thread] 

List:       syslog-ng
Subject:    RE: [syslog-ng]Message aggregation
From:       Kevin Welch <kevinw () iserv ! net>
Date:       2002-07-15 13:34:53
[Download RAW message or body]

I would have to agree with that accessment, it would definately make my perl
scripts more complicated.  I guess that given the choice I would prefer the
detail over the summarization.  Probably should have spent a bit more time
thinking about why exactly I wanted that feature.   Thanks for the response.

-- Kevin

-----Original Message-----
From: syslog-ng-admin@lists.balabit.hu
[mailto:syslog-ng-admin@lists.balabit.hu]On Behalf Of Balazs Scheidler
Sent: Monday, July 15, 2002 6:33 AM
To: syslog-ng@lists.balabit.hu
Subject: Re: [syslog-ng]Message aggregation


On Tue, Jul 09, 2002 at 07:02:19PM -0400, Kevin Welch wrote:
> I know this issue has been discussed before, but I never saw an answer
other
> than 'syslog-ng doesnt do that'.
> 
> Perhaps someone could provide insight as to why syslog-ng doesnt aggregate
> messages received?  Is this on a feature list for future releases?  
> 
> Thanks for your time.

It might be implemented once I have time, though IMHO message aggregation
makes log analysis more difficult, especially if you have multiple cascaded
log relays.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.61">
<TITLE>RE: [syslog-ng]Message aggregation</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=2>I would have to agree with that accessment, it would definately make \
my perl scripts more complicated.&nbsp; I guess that given the choice I would prefer \
the detail over the summarization.&nbsp; Probably should have spent a bit more time \
thinking about why exactly I wanted that feature.&nbsp;&nbsp; Thanks for the \
response.</FONT></P>

<P><FONT SIZE=2>-- Kevin</FONT>
</P>

<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: syslog-ng-admin@lists.balabit.hu</FONT>
<BR><FONT SIZE=2>[<A \
HREF="mailto:syslog-ng-admin@lists.balabit.hu">mailto:syslog-ng-admin@lists.balabit.hu</A>]On \
Behalf Of Balazs Scheidler</FONT> <BR><FONT SIZE=2>Sent: Monday, July 15, 2002 6:33 \
AM</FONT> <BR><FONT SIZE=2>To: syslog-ng@lists.balabit.hu</FONT>
<BR><FONT SIZE=2>Subject: Re: [syslog-ng]Message aggregation</FONT>
</P>
<BR>

<P><FONT SIZE=2>On Tue, Jul 09, 2002 at 07:02:19PM -0400, Kevin Welch wrote:</FONT>
<BR><FONT SIZE=2>&gt; I know this issue has been discussed before, but I never saw an \
answer other</FONT> <BR><FONT SIZE=2>&gt; than 'syslog-ng doesnt do that'.</FONT>
<BR><FONT SIZE=2>&gt; </FONT>
<BR><FONT SIZE=2>&gt; Perhaps someone could provide insight as to why syslog-ng \
doesnt aggregate</FONT> <BR><FONT SIZE=2>&gt; messages received?&nbsp; Is this on a \
feature list for future releases?&nbsp; </FONT> <BR><FONT SIZE=2>&gt; </FONT>
<BR><FONT SIZE=2>&gt; Thanks for your time.</FONT>
</P>

<P><FONT SIZE=2>It might be implemented once I have time, though IMHO message \
aggregation</FONT> <BR><FONT SIZE=2>makes log analysis more difficult, especially if \
you have multiple cascaded</FONT> <BR><FONT SIZE=2>log relays.</FONT>
</P>

<P><FONT SIZE=2>-- </FONT>
<BR><FONT SIZE=2>Bazsi</FONT>
<BR><FONT SIZE=2>PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E \
C82C 8EB1</FONT> </P>

<P><FONT SIZE=2>_______________________________________________</FONT>
<BR><FONT SIZE=2>syslog-ng maillist&nbsp; -&nbsp; syslog-ng@lists.balabit.hu</FONT>
<BR><FONT SIZE=2><A HREF="https://lists.balabit.hu/mailman/listinfo/syslog-ng" \
TARGET="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</A></FONT> \
<BR><FONT SIZE=2>Frequently asked questions at <A \
HREF="http://www.campin.net/syslog-ng/faq.html" \
TARGET="_blank">http://www.campin.net/syslog-ng/faq.html</A></FONT> </P>

</BODY>
</HTML>


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic