[syslog-ng]Re: syslog-ng kerdes

SZOKOVACS Robert syslog-ng@lists.balabit.hu
Fri, 4 Jun 2004 10:58:08 +0200


On Friday 04 June 2004 10.46, Balazs Scheidler wrote:
> 2004-06-03, cs keltezéssel 15:53-kor SZOKOVACS Robert ezt írta:
> > On Thursday 03 June 2004 15:50, SZOKOVACS Robert wrote:
> > > Hello,
> > >
> > > hogyan lehet a syslog-ng-t ravenni, hogy a sok egymast koveto egyforma
> > > uzeneteket osszegroupolja es csak annyit mondjon, hogy 'repeated n
> > > times'? Tudja ezt egyaltalan?
> >
> > eeer, sorry, didn't relize it's an international list :(
> >
> > So, I'd like to convince syslog-ng to group the same successive messages
> > as one and say 'last message repeadet x times'.
> >
> > Is it possible?
>
> no, it was not deliberately not implemented as it makes analysing logs
> difficult when logs from multiple hosts are merged into one file.
> However it is an often requested feature, so maybe I'll just implement
> it with a disabled default setting.

hmm, different hosts usually have different prefixes in their logs, so I would 
not consider them identical. And this contraction should be done before 
merging to be effective, anyway, I guess.

thanks

br

Szo