[logs] 3195 Channels

From: Christopher Lonvick (clonvickat_private)
Date: Fri Dec 06 2002 - 08:13:35 PST

  • Next message: Darren Reed: "[logs] syslog-sign implementation?"

    Hi,
    
    The primary thought behind using the BEEP channels was to rate limit the
    relatively less-intersting messages.  Another thought that was kicked
    around was to use a channel to forward messages whose interest level may
    have just changed.  Let's say that you've configured your syslog process
    to forward messages from the Foo daemon to the syslog server but only if
    they are Severity level 4 or above.  Your parser on the server suddenly
    notices some interesting messages but isn't getting the entire story.
    Since BEEP is bi-directional, it _could_ send a command to the remote
    syslog process to start sending severity messages of 5-7 on a different
    channel again using a lower priority.
    
    I am really pleased to see multiple implementations of 3195 even without
    the use of multiple channels.  Being the optimist, I'll expect an
    evolutionary step forward one of these days.  :)
    
    Thanks,
    Chris
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Fri Dec 06 2002 - 10:20:49 PST