[syslog-ng] Simple Doubt

[Alexander Clouter]

Hi,

Tom Le <dottom at gmail.com> [20070605 21:31:33 -0700]:
>
> On 6/5/07, Alexander Clouter <ac56 at soas.ac.uk> wrote:
> >
> >If you are logging to a file and having Perl munch on a log file you can 
> >remove the perl script and pipe from the whole works.  syslog-ng can be 
> >configured to read in directly a log file; it effectively does a 'tail -f' 
> >on the file.
> 
> Except for cases where you need the Perl script to post-process the log file
> to produce a normalized or custom syslog message format.
>
Agreed, however a better design would be:

<Log> ---> <Perl> ---> <Log2>

<Log2> --[using 'tail' function]--> syslog-ng -> syslog-ng

These would be disconnected and you would not run into any nasty problems.  
Another advantage being that if the perl code soaks up the CPU cycles and the 
logging is not urgent (needed at the final destination ASAP) you could nice 
down the priority of the process to prevent it stomping in on syslog-ng's 
performance.

Cheers

Alex