[syslog-ng] [RFC]: MongoDB destination plans (for 3.4 and beyond)

Gergely Nagy algernon at balabit.hu
Tue Jun 21 18:12:27 CEST 2011


Martin Holste <mcholste at gmail.com> writes:

> Good work!  That's a solid start.  For the future, I guess I would ask
> this: are you taking advantage of Mongo's ability to have arrays for
> values?  That's one of the biggest features of NoSQL--you can have
> multiple values in an array under one key.

Nope, not yet. But that's a good idea, and also reminded me that I need
to find a way to properly support MongoDB's Date type aswell.

> The best example is a poor-man's full text search in which you do a
> split() on whitespace in your app (syslog-ng in this case) and put the
> values in an array in Mongo.  If the array is indexed, then all of the
> values are automatically indexed, giving you the ability to find any
> word almost instantly.  Another use would be for the current tags
> feature in pattern-db, which is a more natural fit.

Sounds good, thank you for the suggestion!

-- 
|8]



More information about the syslog-ng mailing list