Re: [syslog-ng] syslog-ng 3.4.0beta1 has been released
I thought that 3.4 was going to include - junctions so that results of multiple parsers could be combined - the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro. Did these features fail to make it into 3.4 or is the documentation just missing these items? Thanks, -- Evan Rempel Senior Systems Administrator, Data Centre Services University of Victoria 250.721.7691
Evan Rempel <erempel@uvic.ca> writes:
I thought that 3.4 was going to include
- junctions so that results of multiple parsers could be combined
This one's included.
- the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro.
As far as I know, this one's in too.
Did these features fail to make it into 3.4 or is the documentation just missing these items?
It is most likely documentation missing. -- |8]
If the docs can get updated by mid January then I'm happy, otherwise can I get a pointer to some reference so I can "get started" ? -- Evan Rempel Gergely Nagy <algernon@balabit.hu> wrote: Evan Rempel <erempel@uvic.ca> writes:
I thought that 3.4 was going to include
- junctions so that results of multiple parsers could be combined
This one's included.
- the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro.
As far as I know, this one's in too.
Did these features fail to make it into 3.4 or is the documentation just missing these items?
It is most likely documentation missing. -- |8] ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Evan Rempel <erempel@uvic.ca> writes:
If the docs can get updated by mid January then I'm happy, otherwise can I get a pointer to some reference so I can "get started" ?
I can't speak for the documentation team, but at least juncions are showcased on Bazsi's blog: http://bazsi.blogs.balabit.com/2012/05/cee-prototype-and-a-show-case-for-the... http://bazsi.blogs.balabit.com/2012/01/syslog-ng-flexibility-improvements/ The commit message this went in with also has some pointers, which are more or less up to date: https://github.com/algernon/syslog-ng/commit/0e858cbc7eccffffff12cfcccf7399b... Other than these, feel free to ask if you have any specific questions. -- |8]
----- Original message -----
If the docs can get updated by mid January then I'm happy, otherwise can I get a pointer to some reference so I can "get started" ?
the relevant patches usually have examples, also my blog posts could be of help. I doubt the docs will be updated by then.
-- Evan Rempel
Gergely Nagy <algernon@balabit.hu> wrote:
Evan Rempel <erempel@uvic.ca> writes:
I thought that 3.4 was going to include
- junctions so that results of multiple parsers could be combined
This one's included.
- the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro.
As far as I know, this one's in too.
Did these features fail to make it into 3.4 or is the documentation just missing these items?
It is most likely documentation missing.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Hi Evan, Unfortunately, it is highly unlikely that the documentation will be completely updated with every new 3.4 feature by mid-January. We might be able to add some info on junctions, since that is one of the main features of 3.4, but I can't promise for sure. Regards, Robert On Friday, December 21, 2012 16:48 CET, Evan Rempel <erempel@uvic.ca> wrote:
If the docs can get updated by mid January then I'm happy, otherwise can I get a pointer to some reference so I can "get started" ?
-- Evan Rempel
Gergely Nagy <algernon@balabit.hu> wrote:
Evan Rempel <erempel@uvic.ca> writes:
I thought that 3.4 was going to include
- junctions so that results of multiple parsers could be combined
This one's included.
- the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro.
As far as I know, this one's in too.
Did these features fail to make it into 3.4 or is the documentation just missing these items?
It is most likely documentation missing.
-- |8]
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
----- Original message -----
I thought that 3.4 was going to include
- junctions so that results of multiple parsers could be combined
it is in.
- the ability to run a parser against a user defined macro rather than always parsing the complete MESSAGE marcro.
csvparser has a template() option, but dbparser doesn't (though that's trivial to add). what I had in mind (fully n dimensional patterndb) wasn't finished, and I didn't want to wait any longer.
Did these features fail to make it into 3.4 or is the documentation just missing these items?
docs is not yet competely updated. contributions would be welcome there too.
participants (4)
-
Balazs Scheidler
-
Evan Rempel
-
Fekete Róbert
-
Gergely Nagy