[syslog-ng]help please...

Nicholas Berry nberry@ragingwire.com
Thu, 22 Aug 2002 13:20:01 -0700


This is a multi-part message in MIME format.

------_=_NextPart_001_01C24A19.4B41F2EA
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

We're using the macro abilities of syslog-ng to write out to a YYYY-MM =
format
=20
example:
 destination default { file =
("/var/syslog-ng/$YEAR-$MONTH/$HOST_FROM/messages" ... ); }
Nicholas Berry
Systems Engineer
RagingWire Telecommunications, Inc.
nberry@ragingwire.com

-----Original Message-----
From: Keven Belanger [mailto:kbelanger@logicon.ca]=20
Sent: Thursday, August 22, 2002 12:23 PM
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng]help please...


I have 2 question:
=20
1- I'm looking for a script (perl or other) to scan a file to find =
unique line (line that are duplicate will be remove)
2- Also want to know which log rotation people are using under Solaris =
??
Answer soon!
=20
Thanx!
=20
=20
K=E9ven Belanger
Analyste en solutions de s=E9curit=E9
Logicon Inc. - Division S=E9curit=E9
819.825.8049 x7717
800.567.6399 x7717
=20

------_=_NextPart_001_01C24A19.4B41F2EA
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:o =3D=20
"urn:schemas-microsoft-com:office:office" xmlns:w =3D=20
"urn:schemas-microsoft-com:office:word"><HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<TITLE>Message</TITLE>

<META content=3DWord.Document name=3DProgId>
<META content=3D"MSHTML 6.00.2716.2200" name=3DGENERATOR>
<META content=3D"Microsoft Word 10" name=3DOriginator><LINK=20
href=3D"cid:filelist.xml@01C249EF.DCBEAC10" rel=3DFile-List><!--[if gte =
mso 9]><xml>
 <o:OfficeDocumentSettings>
  <o:DoNotRelyOnCSS/>
 </o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:SpellingState>Clean</w:SpellingState>
  <w:GrammarState>Clean</w:GrammarState>
  <w:DocumentKind>DocumentEmail</w:DocumentKind>
  <w:HyphenationZone>21</w:HyphenationZone>
  <w:EnvelopeVis/>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
  </w:Compatibility>
  <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
 </w:WordDocument>
</xml><![endif]-->
<STYLE>@font-face {
	font-family: Verdana;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; =
mso-header-margin: .5in; mso-footer-margin: .5in; mso-paper-source: 0; }
P.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-style-parent: ""; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
LI.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-style-parent: ""; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
DIV.MsoNormal {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-style-parent: ""; mso-pagination: widow-orphan; =
mso-fareast-font-family: "Times New Roman"
}
A:link {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlink {
	COLOR: blue; TEXT-DECORATION: underline; text-underline: single
}
A:visited {
	COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
SPAN.MsoHyperlinkFollowed {
	COLOR: purple; TEXT-DECORATION: underline; text-underline: single
}
P.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
LI.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
DIV.MsoAutoSig {
	FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"; =
mso-pagination: widow-orphan; mso-fareast-font-family: "Times New Roman"
}
SPAN.EmailStyle17 {
	COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: =
personal-compose; mso-style-noshow: yes; mso-ansi-font-size: 10.0pt; =
mso-bidi-font-size: 10.0pt; mso-ascii-font-family: Arial; =
mso-hansi-font-family: Arial; mso-bidi-font-family: Arial
}
SPAN.SpellE {
	mso-style-name: ""; mso-spl-e: yes
}
SPAN.GramE {
	mso-style-name: ""; mso-gram-e: yes
}
DIV.Section1 {
	page: Section1
}
</STYLE>
<!--[if gte mso 10]>
<style>
 /* Style Definitions */=20
 table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-parent:"";
	mso-padding-alt:0in 5.4pt 0in 5.4pt;
	mso-para-margin:0in;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:"Times New Roman";}
</style>
<![endif]--></HEAD>
<BODY lang=3DFR-CA style=3D"tab-interval: 35.4pt" vLink=3Dpurple =
link=3Dblue>
<DIV><SPAN class=3D718231720-22082002><FONT face=3DArial color=3D#0000ff =
size=3D2>We're=20
using the macro abilities of syslog-ng to write out to a YYYY-MM=20
format</FONT></SPAN></DIV>
<DIV><SPAN class=3D718231720-22082002><FONT face=3DArial color=3D#0000ff =

size=3D2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=3D718231720-22082002><FONT face=3DArial color=3D#0000ff =

size=3D2>example:</FONT></SPAN></DIV>
<DIV><SPAN class=3D718231720-22082002><FONT face=3DArial color=3D#0000ff =

size=3D2>&nbsp;destination default { file=20
("/var/syslog-ng/$YEAR-$MONTH/$HOST_FROM/messages" ... ); =
}</FONT></SPAN></DIV><!-- Converted from text/plain format -->
<P align=3Dleft><FONT size=3D2><FONT face=3DTahoma><STRONG>Nicholas=20
Berry</STRONG><BR>Systems Engineer<BR>RagingWire Telecommunications,=20
Inc.<BR>nberry@ragingwire.com</FONT><BR></FONT></P>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
align=3Dleft><FONT=20
  face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B> =
Keven Belanger=20
  [mailto:kbelanger@logicon.ca] <BR><B>Sent:</B> Thursday, August 22, =
2002 12:23=20
  PM<BR><B>To:</B> syslog-ng@lists.balabit.hu<BR><B>Subject:</B> =
[syslog-ng]help=20
  please...<BR><BR></FONT></DIV>
  <DIV class=3DSection1>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">I have 2=20
  <SPAN class=3DGramE>question</SPAN>:<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">1- I'm=20
  looking for a script (<SPAN class=3DSpellE>perl</SPAN> or other) to =
scan a file=20
  to find unique line (line that are duplicate will be=20
  remove)<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">2- Also=20
  want to know which log rotation people are using under <SPAN=20
  class=3DGramE>Solaris ??</SPAN><o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">Answer=20
  soon!<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><SPAN class=3DSpellE><FONT face=3DArial =
size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">Thanx</SPAN></FONT></SPAN><FONT=20
  face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US">!<o:p></o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoNormal><FONT face=3DArial size=3D2><SPAN lang=3DEN-US=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: =
EN-US"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=3DMsoAutoSig><FONT face=3DVerdana size=3D2><SPAN lang=3DFR=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Verdana; mso-ansi-language: FR; =
mso-no-proof: yes">K=E9ven=20
  Belanger</SPAN></FONT><SPAN lang=3DFR=20
  style=3D"mso-ansi-language: FR; mso-no-proof: =
yes"><o:p></o:p></SPAN></P>
  <P class=3DMsoAutoSig><FONT face=3DVerdana size=3D2><SPAN=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Verdana; mso-no-proof: =
yes">Analyste en=20
  solutions de s=E9curit=E9<BR>Logicon Inc. - Division=20
  S=E9curit=E9<BR></SPAN></FONT><FONT face=3DVerdana size=3D2><SPAN =
lang=3DFR=20
  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Verdana; mso-ansi-language: FR; =
mso-no-proof: yes">819.825.8049=20
  x7717</SPAN></FONT><SPAN lang=3DFR=20
  style=3D"mso-ansi-language: FR; mso-no-proof: =
yes"><o:p></o:p></SPAN></P>
  <P class=3DMsoAutoSig><FONT face=3DVerdana size=3D2><SPAN lang=3DEN-US =

  style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Verdana; mso-ansi-language: =
EN-US; mso-no-proof: yes">800.567.6399=20
  x7717</SPAN></FONT><SPAN lang=3DEN-US=20
  style=3D"mso-ansi-language: EN-US; mso-no-proof: =
yes"><o:p></o:p></SPAN></P>
  <P class=3DMsoNormal><FONT face=3D"Times New Roman" size=3D3><SPAN=20
  style=3D"FONT-SIZE: =
12pt"><o:p>&nbsp;</o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML=
>

------_=_NextPart_001_01C24A19.4B41F2EA--