[syslog-ng] [RFC] procfile destination

Gergely Nagy algernon at balabit.hu
Mon Dec 16 13:20:33 CET 2013

Balazs Scheidler <bazsi at balabit.hu> writes:

> - no template in the name of the file

Would it be possible to have templates in the filename? I can imagine
cases where I'd write to a different file based on message properties.

Like, if I start to see alerts that stuff is timing out, I'd spin up my
second CPU core (in a laptop setting, where I can't be bothered with
proper monitoring, and want to (ab)use syslog-ng for that task).

> - name of the driver, right now it is called procfile as it was the
> original use-case, however it works with stuff in /dev too, and might
> work with simple named pipes.

It also works with stuff in /sys, so procfile() is not a good name. I
would suggest oneshot-file() or simply oneshot().

> - right now the file must exist and is not created (e.g. it really
> requires an existing file); do we need that?

I do not think file creation is important in this case.

> - do we need append mode in some cases
> - whether we need append mode (if we think of general files, this would
> probably be needed)

I don't think we do.


More information about the syslog-ng mailing list