<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Parallel Use of syslog-ng with syslogd (Linux RH ES4)</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3268" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Verdana><FONT size=2><SPAN
class=068212014-04032008>> </SPAN>are there supplied hooks to routines
equivalent to syslog(3) in the C library? </FONT></FONT></DIV>
<DIV dir=ltr align=left><FONT face=Verdana size=2></FONT> </DIV>
<DIV dir=ltr align=left><SPAN class=068212014-04032008><FONT face=Verdana
size=2>syslog-ng can function as a drop-in replacement for syslogd, applications
will not notice anything has changed. When an application uses the system call
syslog() on Linux all that really happens is that the message is sent to the
socket /dev/log. It is assumed that some daemon is listening and writing
down whatever it hears. Normally the listener is syslogd but you can replace it
with any other listener (e.g. syslog-ng) and the calling application will have
no idea that anything has changed.</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> syslog-ng-bounces@lists.balabit.hu
[mailto:syslog-ng-bounces@lists.balabit.hu] <B>On Behalf Of </B>Diffenderfer,
Randy<BR><B>Sent:</B> 04 March 2008 12:23<BR><B>To:</B>
syslog-ng@lists.balabit.hu<BR><B>Subject:</B> [syslog-ng] Parallel Use of
syslog-ng with syslogd (Linux RH ES4)<BR></FONT><BR></DIV>
<DIV></DIV><!-- Converted from text/rtf format -->
<P><FONT face=Verdana size=2>Folks,</FONT> </P>
<P><FONT face=Verdana size=2>I haven't yet done the research here by RTFS'ing,
so I apologize in advance for uninformed posting… :-)</FONT> </P>
<P><FONT face=Verdana size=2>I'm looking at syslog-ng as a syslogd replacement
in our shop. I'd like to determine in advance if there is a reasonable way
to run these in parallel.</FONT></P>
<P><FONT face=Verdana size=2>In particular, are there supplied hooks to routines
equivalent to syslog(3) in the C library? I understand that I can shut
down syslogd and bring up syslog-ng listening to /dev/log, and things will be
transparent to production code. I envision an environment where I have the
RH syslogd listening to /dev/log, and syslog-ng listening to /dev/log-ng.
Using perl and C routines, can I integrate my production code with minimal
alterations to selectively use the new facility?</FONT></P>
<P><FONT face=Verdana size=2>Thanks for any advice,</FONT> <BR><FONT
face=Verdana size=2>rnd</FONT> </P></BODY></HTML>