RE: [logs] Syslog payload format

Previous message: H C: "Re: [logs] Windows Event Log Analysis"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

rgerhardsat_private

> So here's a suggestion - why not just make a syslog() client 
> that can get popped into a shared lib for starters. Have it 
> log new-style tagged date and time (AND YEAR!) ;) and have a 
> tag like the one Paul and I used for our "backwards 
> compatible" syslog messages - we used "SYSLOGMSG" to indicate 
> "free form stuff."  At least that way the important tags can 
> get defaulted and passed through, and we also know what 
> applications are producing old-style logs so they can 
> eventually be eradicated.

Excellent - I would go for this route. Should also be a fairly easy
hack...

... once we have defined the actual on the wire format ;)

Rainer
_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis