<div dir="ltr"><br><div>@Laci Mészáros @Fabien Wernli </div><div>Thanks for your reply.</div><div>You really inspired me.</div><div><br></div><div><br></div><div>I thinks I should make the new Websocket Destination support two mode in its configuration</div><div><br></div><div>1) client mode</div><div>Just send the log message to another Websocket Server</div><div><br></div><div>2) Server mode</div><div>The new WebSocket destination itself serves as a Websocket Server. It has a log messages buffer. The log messages send to the destination are stored in the buffer (If the buffer is full then the oldest message is overrided).</div><div>Then other WebSocket clients(Such as a web browser) can directly connect to the Websocket Server to subscribe the messsage. This is the pub-sub communication that @faxmodem and @Fabien mentioned. </div><div>Then I plan to define some syntax that the WebSocket destination can understand to filter the log message. So the WebSocket Client can send its filter definition and get the logs it want from the new WebSocket destination.</div><div><br></div><div>What do you think about this idea? Any suggestions? </div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-03-16 22:25 GMT+08:00 Fabien Wernli <span dir="ltr"><<a href="mailto:wernli@in2p3.fr" target="_blank">wernli@in2p3.fr</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<span class=""><br>
On Wed, Mar 16, 2016 at 08:31:47AM +0800, Yilin Li wrote:<br>
> 1) WebSocket support two-way communication. However, I found only one-way<br>
> communication will be used in the project Idea. If this destination will be<br>
> used for alerting, what are the advantages of using Websocket? Is it mainly<br>
> for supporting another new protocol or better performance of WebSocket ?<br>
<br>
</span>As I previously said [1] I think it would be great to have a subscription<br>
mechanism, so the client would sent its filter definition (e.g.<br>
`program(sshd)`) and the destination would send it the logs that match this<br>
filter.<br>
<br>
But maybe this is out of scope?<br>
<br>
[1] <a href="https://lists.balabit.hu/pipermail/syslog-ng/2016-February/022686.html" rel="noreferrer" target="_blank">https://lists.balabit.hu/pipermail/syslog-ng/2016-February/022686.html</a><br>
<div class="HOEnZb"><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Thanks,</div><div>Yilin Li</div><div>-- </div><div>Institute of Software Chinese Academy of Sciences</div></div></div></div></div>
</div>