Hi, Can I use "unix-dgram" as a destination config over RedHatLinux(RHEL ES version4 update5). I want to do following. 1. syslog-ng server receive syslog-message. 2. syslog-ng server write the message to a fifo pipe. (I want to config destination using unix-dgram.) 3. client-ap read the message from the fifo pipe. (I think client-ap can read messages one by one using unix-dgram.) Thanks hiro _________________________________________________________________ Hotmail限定 Windows Live x Lost Odysseyプレゼントキャンペーン 12月21日まで http://go.windowslive.jp/
We do this by using the "pipe" destination for syslog-ng and then use a second copy of syslog-ng to read from the pipe with a destination of program. This requires the program to be able to read data from the standard in. For the curious, we do this to seperate the filtering and formating of data to the program from the base system syslog service (handling messages from /var/log etc) so that we can stop/start the program without having to start/stop the system syslog service. Evan. hi ro wrote:
Hi,
Can I use "unix-dgram" as a destination config over RedHatLinux(RHEL ES version4 update5).
I want to do following.
1. syslog-ng server receive syslog-message. 2. syslog-ng server write the message to a fifo pipe. (I want to config destination using unix-dgram.) 3. client-ap read the message from the fifo pipe. (I think client-ap can read messages one by one using unix-dgram.)
Thanks hiro _________________________________________________________________ Hotmail限定 Windows Live x Lost Odysseyプレゼントキャンペーン 12月21日まで http://go.windowslive.jp/
------------------------------------------------------------------------
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
Hi, I want to config the following for client-ap to read messages one by one. and want to know the following configuration is supported over RHEL ES version 4. source s_remote { udp(ip(xxx.xxx.xxx.xxx) port(514)); };destination d_remote { unix-dgram("/tmp/test.pipe"); };log { source(s_remote); destination(d_remote); }; Additionally, is there any differences of reliability whether to use unix-dgram or to use pipe ? ※ Under the following configuration, client-ap need to decide boundary of message. I want to avoid this. source s_remote { udp(ip(xxx.xxx.xxx.xxx) port(514)); };destination d_remote { pipe("/tmp/test.pipe"); };log { source(s_remote); destination(d_remote); }; Thanks hiro
We do this by using the "pipe" destination for syslog-ng and then use a second> copy of syslog-ng to read from the pipe with a destination of program.> This requires the program to be able to read data from the standard in.> > For the curious, we do this to seperate the filtering and formating of data> to the program from the base system syslog service (handling messages from /var/log etc)> so that we can stop/start the program without having to start/stop the system syslog> service.> > Evan.> > hi ro wrote:> > Hi,> > > > Can I use "unix-dgram" as a destination config over RedHatLinux(RHEL ES version4 update5).> > > > I want to do following.> > > > 1. syslog-ng server receive syslog-message.> > 2. syslog-ng server write the message to a fifo pipe.> > (I want to config destination using unix-dgram.)> > 3. client-ap read the message from the fifo pipe.> > (I think client-ap can read messages one by one using unix-dgram.) > > > > Thanks> > hiro> > _________________________________________________________________> > Hotmail限定 Windows Live x Lost Odysseyプレゼントキャンペーン 12月21日まで> > http://go.windowslive.jp/> > > > > > ------------------------------------------------------------------------> > > > _______________________________________________> > syslog-ng maillist - syslog-ng@lists.balabit.hu> > https://lists.balabit.hu/mailman/listinfo/syslog-ng> > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html> > > > _______________________________________________> syslog-ng maillist - syslog-ng@lists.balabit.hu> https://lists.balabit.hu/mailman/listinfo/syslog-ng> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html>
「MSN クリスマス特集」今年は、最高の愛あふれるクリスマスにしませんか。 http://event.jp.msn.com/xmas2007/
hi ro wrote:
Hi,
I want to config the following for client-ap to read messages one by one. and want to know the following configuration is supported over RHEL ES version 4.
source s_remote { udp(ip(xxx.xxx.xxx.xxx) port(514)); }; destination d_remote { unix-dgram("/tmp/test.pipe"); }; log { source(s_remote); destination(d_remote); };
I suppose it would work, but why would you want to use dgram on a pipe?
Additionally, is there any differences of reliability whether to use unix-dgram or to use pipe ?
Yes, dgram will always be the least reliable, but you aren't going onto the network so it may be irrelevant.
Under the following configuration, client-ap need to decide boundary of message.
Yes, but there is a "new line" between messages anyway. You would have the same problem using dgram. There is no garauntee that a dgram written to a destination will have the same boundaries as the dgram read at the receiving end.
I want to avoid this.
source s_remote { udp(ip(xxx.xxx.xxx.xxx) port(514)); }; destination d_remote { pipe("/tmp/test.pipe"); }; log { source(s_remote); destination(d_remote); };
Why do you want to avoid this? It would work very reliably and the receiver just reads "lines". Evan.
participants (2)
-
Evan Rempel
-
hi ro