Re: [logs] Filesystem for logging

From: Tom Perrine (tepat_private)
Date: Tue Dec 17 2002 - 14:07:29 PST

  • Next message: marc: "Re: [logs] Syslog payload format"

    The "news filesystem" that is in INN (later versions) seems to be a
    jumping off point.
    
    It is a circular buffer of "articles".  And that's about it.  There is
    an external DB that maps article identifiers to starting block# and
    size, but that's about all there is to it.
    
    There is only one "file", and that is the file system.  There is only
    one real operation, and that is "append" article to filesystem.  When
    the last block in the partition is written, the block # wraps around,
    "expiring" the articles being over-written.
    
    Since loading custom filesystem modules is pretty easy these days, a
    true "logging filesystem" :-)  is quite doable.
    
    --tep
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    http://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Wed Dec 18 2002 - 12:13:19 PST