[syslog-ng] Bazsi's blog: syslog-ng flexibility improvements

Balazs Scheidler bazsi at balabit.hu
Wed Jan 18 18:11:10 CET 2012


On Mon, 2012-01-16 at 12:45 -0800, Evan Rempel wrote:
> Balazs Scheidler wrote:
> > On Mon, 2012-01-16 at 09:22 -0500, Patrick Hemmer wrote:
> > 
> >>> source s_apache {
> >>>   log {
> >>>     source { file("/var/log/apache/error.log"); };
> >>>     parser(p_apache_parser); };
> >>>   };
> >>> };
> >>>
> >>> log { source(s_apache); ... };
> >>>
> >> This just doesnt feel right. I'm not quire sure how else to put it :-)
> >> I mean that I think of `log` statements as output handlers for a
> >> message. They control how the message leaves syslog-ng, whether it be
> >> to a file, database, pipe, whatever. To me it seems to make more sense
> >> if the `log` statement is called something else here (inside the
> >> `source` block), though what I dont know. Maybe at the least an alias,
> >> so that log and the alias are the exact same things, but that reading
> >> the config would make it look more logical. 
> > 
> > Sure, I was also thinking hard what keywords to use in this case.
> > Internally a log {} is called a "sequence", but sure an alias would be
> > easy to do.
> > 
> > Do you perhaps have a suggestion? I'm not a native English speaker, thus
> > naming thing is sometimes difficult for me.
> 
> How about one of these
> 
> pipe
> stream
> channel
> conduit
> tube
> flow
> spout
> duct
> chute
> 
> I prefer one of
> 
> channel
> conduit
> duct
> 

Thanks for the names. I'd have to think about them a little bit more to
get used to them though. I can't pick one right now, but I'd also like
to change them for better readability.


-- 
Bazsi




More information about the syslog-ng mailing list