[syslog-ng] [PATCH 0/3]: value-pairs() & related patches

Gergely Nagy algernon at balabit.hu
Mon Apr 25 19:08:09 CEST 2011


Matthew Hall <mhall at mhcomputing.net> writes:

>> > tfson()
>> > =======
>> > 
>> > For extra fun & profit, Balint Kovacs' format_json has been ported to
>> > use value-pairs(), and this will be the third patch in the series, and
>> > is also available on my integration/tfjson branch.
>> > 
>> > This one's the least important, though it's dead simple, therefore I'd
>> > be very happy if it made past the feature freeze aswell.
>> 
>> I'd integrate this into 3.4 instead. mongodb is already in, and the
>> value-pairs stuff is a clear win there.
>> 
>> tfjson and substr (anything I've missed) should go to 3.4. Hopefully
>> that can be a faster release-cycle, as I don't intend to break
>> everything as I did with 3.3. (you know converting a program from single
>> to multi-threaded has a certain cost).
>
> Having JSON support would be a big boost for those of us who want to do high speed integration with external apps without using stuff that involves slow regexes.
>
> I'd miss this feature if it didn't go in.

If it doesn't, that's not too bad, either, in my opinion: as long as the
libsyslog-ng headers & whatnot are installed (which 3.3 is supposed to
install, I think), I can easily turn tfjson into an external module
until 3.4 is released as stable with tfjson included.

Not as convenient as having it in the core, but with a little bit of
work on my end, it can be made to compile without patching. I'd think
that's an acceptable compromise.

(Come to think of it, I could even collect a bunch of other stuff like
the $(substr) macro into this external module, so that people who want
to use them just have to download a tarball, do ./configure && make &&
make install and be done with it - no patching required)

-- 
|8]



More information about the syslog-ng mailing list