Hi Gergely,<div>Rather than re-invent the wheel (on the presentation layer piece), you might be interested in knowing about my project - LogZilla (<a href="http://www.logzilla.info">http://www.logzilla.info</a>). </div><div>
It is free to use for anyone getting < 1million messages a day and even then, the full version is free for anyone who joins the team and contributes :-)</div><div><br></div><div>If you are interested in integrating Mongo into it, let me know!</div>
<div><br></div><div><br></div><div><br clear="all">______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br>
<br><br><div class="gmail_quote">On Sat, Jan 8, 2011 at 4:34 PM, Gergely Nagy <span dir="ltr"><<a href="mailto:algernon@balabit.hu">algernon@balabit.hu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi!<br>
<br>
During the past couple of nights, I was busy coming up with something<br>
that would showcase the power of syslog-ng combined with the mongodb<br>
destination, and that is how mojology was born:<br>
<br>
<a href="http://mojology.madhouse-project.org/" target="_blank">http://mojology.madhouse-project.org/</a><br>
source available @ <a href="https://github.com/algernon/mojology" target="_blank">https://github.com/algernon/mojology</a><br>
<br>
To sum it up: it's a web based log browser, a reasonably simple one: one<br>
can't search, or do advanced filtering (yet!), only a few basic stuff.<br>
<br>
The interesting part comes from the fact that the logs it displays are<br>
stored in mongodb, a document store, and as such, the structure of them<br>
is very, very flexible. Although, the application does make a few<br>
assumptions (see the about page or the readme in the sources), it still<br>
retains a lot of flexibility.<br>
<br>
Without going into the gory details (that's what the source is for ;),<br>
let me show you a few interesting pages!<br>
<br>
Examples<br>
--------<br>
<br>
* <a href="http://mojology.madhouse-project.org/log/4d28cd01f310ef4f00000024" target="_blank">http://mojology.madhouse-project.org/log/4d28cd01f310ef4f00000024</a><br>
<br>
This one was originally made with the following command:<br>
logger -i -t hi 'Hello World! This concludes our demo session."<br>
<br>
Then I went into the MongoDB shell and added a few other keys below the<br>
"dyn" sub-document, alongside the default "classifier" (courtesy of<br>
patterndb).<br>
<br>
As you can see, no matter how deep one nests, it still displays<br>
properly. It's also easy to query, even at such depths.<br>
<br>
* <a href="http://mojology.madhouse-project.org/log/4d28cba4f310ef4f0000001e" target="_blank">http://mojology.madhouse-project.org/log/4d28cba4f310ef4f0000001e</a><br>
<br>
Logging in from one computer to my desktop, using password<br>
authentication. This entry was made fully automatically.<br>
<br>
Other notes<br>
-----------<br>
<br>
The database behind the demo application is fairly small, only 39<br>
messages stored, but hey, it's a demo!<br>
<br>
The program itself is a little over a hundred lines of python +<br>
templates; built upon Flask & PyMongo.<br>
<br>
For the best experience, a recent browser is strongly advised: Chromium<br>
6+, Firefox 4+ for best results; Firefox 3 works very well too, but some<br>
of the tiny cosmetic features do not; the site displays in IE7+ too, and<br>
can be used, but the experience is rather disappointing.<br>
<br>
I hope this little weekend hack helps demonstrate how flexible mongodb<br>
can be for logging, and how well syslog-ng can make use of that<br>
flexibility.<br>
<br>
--<br>
|8]<br>
<br>
<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</blockquote></div><br></div>