Directories with names like " Error", " SCSI", "," Are showing up in the directory that holds the syslogs for the different hosts that we monitor. Has anyone seen these random directories. Any suggestions on how to deal with them. Thanks
On Wed, Apr 24, 2002 at 10:32:20AM -0700, Painter, Jennifer wrote:
Directories with names like " Error", " SCSI", ","
Are showing up in the directory that holds the syslogs for the different hosts that we monitor.
Has anyone seen these random directories. Any suggestions on how to deal with them.
I archive by host, but syslog-ng can only do so much with certain messages. [root@loghost last]# cat /var/log/HOSTS/last/local2/2001/09/14/local220010914 Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times Obviously I have no host named "last", syslog-ng can't second guess the hostname sent when it could be valid. I want a macro taken from gethostbyaddr() instead of from the message contents that could be used to force a valid hostname no matter what. Baszi, could this be done please? It would help all of us who use syslog-ng for log archiving in the filesystem. -- Linux is like an indian's tent: No gates, no windows, and apache inside.
On Wed, Apr 24, 2002 at 10:47:11AM -0700, Nate Campi wrote:
On Wed, Apr 24, 2002 at 10:32:20AM -0700, Painter, Jennifer wrote:
Directories with names like " Error", " SCSI", ","
Are showing up in the directory that holds the syslogs for the different hosts that we monitor.
Has anyone seen these random directories. Any suggestions on how to deal with them.
I archive by host, but syslog-ng can only do so much with certain messages.
[root@loghost last]# cat /var/log/HOSTS/last/local2/2001/09/14/local220010914 Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times Sep 14 12:21:58 last message repeated 17 times
Obviously I have no host named "last", syslog-ng can't second guess the hostname sent when it could be valid.
I want a macro taken from gethostbyaddr() instead of from the message contents that could be used to force a valid hostname no matter what.
Baszi, could this be done please? It would help all of us who use syslog-ng for log archiving in the filesystem.
try the attached patch. ps: if this patches proves to be stable, I'll release 1.5.17 -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
On Thu, Apr 25, 2002 at 10:59:43AM +0200, Balazs Scheidler wrote:
On Wed, Apr 24, 2002 at 10:47:11AM -0700, Nate Campi wrote:
On Wed, Apr 24, 2002 at 10:32:20AM -0700, Painter, Jennifer wrote:
Directories with names like " Error", " SCSI", ","
Are showing up in the directory that holds the syslogs for the different hosts that we monitor.
Has anyone seen these random directories. Any suggestions on how to deal with them.
I want a macro taken from gethostbyaddr() instead of from the message contents that could be used to force a valid hostname no matter what.
try the attached patch.
ps: if this patches proves to be stable, I'll release 1.5.17
Working as expected, on a lightly loaded loghost. I'll report back tomorrow. Thanks. -- "Press any key... no, no, no, NOT THAT ONE!" -Anon. "Enter any 11-digit prime number to continue..." -Anon.
participants (3)
-
Balazs Scheidler
-
Nate Campi
-
Painter, Jennifer