[syslog-ng] pattern naming problems

[Matthew Hall]

Hi CzP,

On Thu, Oct 14, 2010 at 12:12:03PM +0200, Peter Czanik wrote:
> "Applications are grouped by their respective function and
> each application gets a single file that lists all the patterns of that
> application."

Seems clear enough.

> So it would be more appropriate to rename imapd.pdb to
> wu-imapd.pdb (as it would only have patterns for Washington University
> IMAPd), and have a separate courier.pdb, or even courier-imapd.pdb and
> courier-pop3d.pdb. What do you think?

Yes, in the samples I have seen there are many Pattern DBs named after 
brands, companies, and/or specific software products (like WU IMAPd or 
Couried IMAPd, etc.) So I don't think there's anything wrong with naming 
your XMLs after the program they support. That makes it easy for the 
administrator to find and enable the right XMLs for their machines.

> Bye,
> Peter Czanik (CzP) <czanik at balabit.hu>

Thanks for all the hard work making nice patterns. I have some I'll 
contribute soon once I've given them a proper production test.

Regards,
Matthew Hall.