[syslog-ng] [RFC]: MongoDB destination plans (for 3.4 and beyond)
Gergely Nagy
algernon at balabit.hu
Tue Jun 21 18:12:27 CEST 2011
Martin Holste <mcholste at gmail.com> writes:
> Good work! That's a solid start. For the future, I guess I would ask
> this: are you taking advantage of Mongo's ability to have arrays for
> values? That's one of the biggest features of NoSQL--you can have
> multiple values in an array under one key.
Nope, not yet. But that's a good idea, and also reminded me that I need
to find a way to properly support MongoDB's Date type aswell.
> The best example is a poor-man's full text search in which you do a
> split() on whitespace in your app (syslog-ng in this case) and put the
> values in an array in Mongo. If the array is indexed, then all of the
> values are automatically indexed, giving you the ability to find any
> word almost instantly. Another use would be for the current tags
> feature in pattern-db, which is a more natural fit.
Sounds good, thank you for the suggestion!
--
|8]
More information about the syslog-ng
mailing list