public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: Dale <rdalek1967@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Sysloggers
Date: Wed, 17 Jun 2009 13:35:18 -0500	[thread overview]
Message-ID: <4A393766.1090707@gmail.com> (raw)
In-Reply-To: <642958cc0906170733o3e83e4a3v58c9c38652ff905b@mail.gmail.com>

Mark Shields wrote:
> On Tue, Jun 16, 2009 at 4:49 PM, Alan McKinnon
> <alan.mckinnon@gmail.com <mailto:alan.mckinnon@gmail.com>> wrote:
>
>     Hi,
>
>     Does anyone have decent experience with sysloggers other than
>     syslog-ng, and
>     be willing to share experiences?
>
>     I'm especially interested in some of the advanced features of
>     syslog-ng
>     Premium from Balabit.com (based on and extending their open source
>     version):
>
>     SSL-encrypted traffic over the network
>     Disk-based buffering on the client
>     Windows agents
>     Timezone aware (which syslog doesn't do and syslog-ng only partially)
>     Encrypted disk files
>     Filter, parse and rewrite incoming logs (vital if you need the
>     auth log over
>     here and the password field stored over there, without jumping
>     through hoops
>     first)
>     High scalability - 2000 Cisco devices and 200+ servers to start,
>     distributed
>     country wide
>
>     --
>     alan dot mckinnon at gmail dot com
>
>
> syslog-ng is the de facto standard.  Metalog is fine for desktops, but
> I use syslog-ng on all my servers.  Nearly all programs that can
> process log files are compatible with it.
>
> -- 
> - Mark Shields

Same here.  I do wish it would fill my log full of dups tho.  Sometimes
my DVD thinks there is media in there and it is trying to read it when
it is empty.  Since it does this every two seconds, it can create a HUGE
messages file in a hurry.  logrotate helps with this but still, no need
doing the same line hundreds of thousands of times.

Dale

:-)  :-) 

P. S.  Now some guru tell me that it can be told not to do that.  :/



  reply	other threads:[~2009-06-17 18:35 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-06-16 20:49 [gentoo-user] Sysloggers Alan McKinnon
2009-06-17 14:33 ` Mark Shields
2009-06-17 18:35   ` Dale [this message]
2009-06-17 21:31   ` Alan McKinnon
2009-06-17 21:48     ` Neil Bothwick
2009-06-17 22:17       ` Alan McKinnon
2009-06-17 22:37         ` Mick
2009-06-19 14:11           ` [gentoo-user] Sysloggers Harry Putnam

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4A393766.1090707@gmail.com \
    --to=rdalek1967@gmail.com \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox