<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"></head><body>
<div>This could be used for example to process historical log data as part of an investigation. Say you have a search tool (like ELK or something that needs preprocessing to json, sql, etc). </div><div>Being able to send those logs through a command line version that does the exact same processing as the real time one would be extremely valuable. </div><div>Jim</div><div><br></div><div><br></div><div><br></div><div id="composer_signature"><div style="font-size:85%;color:#575757">Sent from my Verizon Wireless 4G LTE smartphone</div></div><br><br>-------- Original message --------<br>From: "Scheidler, Balázs" <balazs.scheidler@balabit.com> <br>Date: 04/10/2015 12:39 AM (GMT-05:00) <br>To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> <br>Subject: Re: [syslog-ng] Understanding Sources & Destinations <br><br><p dir="ltr">Hi,</p>
<p dir="ltr">The command line tool should work primarily between stdin/stdout just like for instance awk.</p>
<p dir="ltr">We may make it possible to fire up tcp listeners but the primary use-case is batch processing already received data.</p>
<p dir="ltr">Another use case is to debug configuration snippets in a faster way than edit/reload/test cycle that nromal syslog-ng offers.</p>
<div class="gmail_quote">On Apr 10, 2015 12:55 AM, "Asadullah Hussain" <<a href="mailto:asadxflow@gmail.com">asadxflow@gmail.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)">Hi Guys, I am working to understand the task of developing syslog-ng as a command line tool (GSoC2015) and I am trying to figure what "possible outputs" the command line tool will take. As per my understanding the input & outputs to syslog are defined as Sources & Destinations (which are places where applications output their logs from respectively).</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)"><br></div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)">I have read the documentation about sources & destinations [Table 6.2 ](<a href="http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.6-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#chapter-sources" target="_blank">http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.6-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#chapter-sources</a>) and my understanding is that syslog has following 3 types of sources: files, streams on tcp/ip sockets and stdout from a program.</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)"><br></div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)">and 3 types of destinations: files or remote hosts (TCP/IP socket) and applications (mentioned in section 7).</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)"><br></div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)">So are these all possible types of inputs/outputs that syslog-ng can have? which have to be supported by the command line tool. Or am I missing some points?</div><div class="gmail_default" style="font-family:georgia,serif;color:rgb(11,83,148)"><br></div>-- <br><div><div dir="ltr"><div>Cheers, </div><div><br></div>Asadullah Hussain</div></div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>
</body></html>