<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Rory,<br>
<br>
Will you tell me the current naming of your log files? I don't know the
real reason for many log files, but as Robert said, perhaps, there are
another easier solutions to avoid it.<br>
<br>
Rory Toma &iacute;rta:
<blockquote cite="mid:4B677E72.5010506@ooma.com" type="cite">
  <pre wrap="">I could, but then I'd have to retrain non-technical folks on how to find 
them, and get their support people to change tools... Kind of a headache...

On 1/29/10 6:13 AM, Fekete Robert wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">Hi,
Just a thought: do you really need to keep that many files open simultaneously?
Can't you use macros (e.g., $HOUR or even $MIN) to lower the number of files
needed in parallel?

Robert

Rory Toma wrote:

   
    </pre>
    <blockquote type="cite">
      <pre wrap="">OK, I have a question. I've found that it is good to run several
syslog-ng processes when dealing with tens of thousands of log files.

So, I'd like to receive everything in one syslog-ng process, and forward
them, via localhost, to about a hundred or so different syslog-ng
processes on the same machine. Is there a good way to write a  (log;
filter; dest;) line that would round-robin between a bunch of
destinations in a single line?
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>


     
      </pre>
    </blockquote>
    <pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>

   
    </pre>
  </blockquote>
  <pre wrap=""><!---->
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>


  </pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">-- 
pzolee
</pre>
</body>
</html>