[syslog-ng] [PATCH 0/3]: value-pairs() & related patches
Gergely Nagy
algernon at balabit.hu
Mon Apr 25 19:08:09 CEST 2011
Matthew Hall <mhall at mhcomputing.net> writes:
>> > tfson()
>> > =======
>> >
>> > For extra fun & profit, Balint Kovacs' format_json has been ported to
>> > use value-pairs(), and this will be the third patch in the series, and
>> > is also available on my integration/tfjson branch.
>> >
>> > This one's the least important, though it's dead simple, therefore I'd
>> > be very happy if it made past the feature freeze aswell.
>>
>> I'd integrate this into 3.4 instead. mongodb is already in, and the
>> value-pairs stuff is a clear win there.
>>
>> tfjson and substr (anything I've missed) should go to 3.4. Hopefully
>> that can be a faster release-cycle, as I don't intend to break
>> everything as I did with 3.3. (you know converting a program from single
>> to multi-threaded has a certain cost).
>
> Having JSON support would be a big boost for those of us who want to do high speed integration with external apps without using stuff that involves slow regexes.
>
> I'd miss this feature if it didn't go in.
If it doesn't, that's not too bad, either, in my opinion: as long as the
libsyslog-ng headers & whatnot are installed (which 3.3 is supposed to
install, I think), I can easily turn tfjson into an external module
until 3.4 is released as stable with tfjson included.
Not as convenient as having it in the core, but with a little bit of
work on my end, it can be made to compile without patching. I'd think
that's an acceptable compromise.
(Come to think of it, I could even collect a bunch of other stuff like
the $(substr) macro into this external module, so that people who want
to use them just have to download a tarball, do ./configure && make &&
make install and be done with it - no patching required)
--
|8]
More information about the syslog-ng
mailing list