Re: [loganalysis] Logging standards and such

From: Andrew Stribblehill (a.d.stribblehillat_private)
Date: Fri Aug 17 2001 - 09:17:41 PDT

  • Next message: Rebecca Kastl: "Re: [loganalysis] Logging standards and such"

    Quoting Chaos Golubitsky <chaosat_private>:
    > 
    > solaris 8 syslogd defaults to a similar behaviour: it gives each
    > message a stamp of the form [ID <msgid> <facility>.<level>], where
    > msgid is (afaik) a hash of the message logged, generated by the
    > msgid command.  so, for instance, the following log entry:
    > 
    >   Aug 16 13:05:17 my_client automountd[193]: [ID 784820 daemon.error] server my_server not responding
    > 
    > corresponds to the second line of:
    > 
    >   % strings `which automountd` | grep responding | msgid
    >   190415 servers %s not responding: %s
    >   784820 server %s not responding
    >   494081 server not responding
    >   543504 %s server not responding%s
    >   543504 %s server not responding%s
    >   125655 get_pathconf: %s: server not responding: %s
    > 
    > i can see how this could be useful for identifying messages quickly,
    > though i don't use it myself.
    
    Sun were telling us that it's so sysadmins note the number of the
    message rather than incorrectly-memorising something they might
    half-understand and possibly confusing it for another similar
    message.
    
    Apparently at one point just before the release of Solaris 8, all the
    Sendmail messages had the same ID!
    
    -- 
    Andrew Stribblehill
    Systems programmer, IT Service, University of Durham, England
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Fri Aug 17 2001 - 09:39:31 PDT