Hello * Question: Does it still hold true that syslog-ng file source does not a tail on any file, so logger sould be used if other logfiles should be forwarded to syslog-ng ? Opinion: Message aggregation by syslog-ng would be a valuable extension. We discussed in a project context if we should implement this with a client side ring buffer in a filter, but consent was, that if we need aggregation we will probably build it for the central loghost as C-Code extension it should help to avoid DOS of a central loghost if many "Clients" flood with the same problem. At the moment we use event based logging in parallel to circumvent the problem Micha

On Friday 04 June 2004 10.46, Balazs Scheidler wrote:

2004-06-03, cs keltezéssel 15:53-kor SZOKOVACS Robert ezt írta:

...

On Thursday 03 June 2004 15:50, SZOKOVACS Robert wrote:

...

Hello,

hogyan lehet a syslog-ng-t ravenni, hogy a sok egymast koveto egyforma uzeneteket osszegroupolja es csak annyit mondjon, hogy 'repeated n times'? Tudja ezt egyaltalan?

eeer, sorry, didn't relize it's an international list :(

So, I'd like to convince syslog-ng to group the same successive messages as one and say 'last message repeadet x times'.

Is it possible?

no, it was not deliberately not implemented as it makes analysing logs difficult when logs from multiple hosts are merged into one file. However it is an often requested feature, so maybe I'll just implement it with a disabled default setting.

hmm, different hosts usually have different prefixes in their logs, so I would not consider them identical. And this contraction should be done before merging to be effective, anyway, I guess. thanks br Szo