Hi, Tom Le <dottom@gmail.com> [20070605 21:31:33 -0700]:
On 6/5/07, Alexander Clouter <ac56@soas.ac.uk> wrote:
If you are logging to a file and having Perl munch on a log file you can remove the perl script and pipe from the whole works. syslog-ng can be configured to read in directly a log file; it effectively does a 'tail -f' on the file.
Except for cases where you need the Perl script to post-process the log file to produce a normalized or custom syslog message format.
Agreed, however a better design would be: <Log> ---> <Perl> ---> <Log2> <Log2> --[using 'tail' function]--> syslog-ng -> syslog-ng These would be disconnected and you would not run into any nasty problems. Another advantage being that if the perl code soaks up the CPU cycles and the logging is not urgent (needed at the final destination ASAP) you could nice down the priority of the process to prevent it stomping in on syslog-ng's performance. Cheers Alex