[logs] minirsyslogd v1.02 available

mikael.olsson@private

Paul Robertson wrote:
> I don't know if syslog-ng is the paragon of syslog performance, but 
> I'd doubt it.  I don't know if someone on this list has put their 
> really fast UDP over the network syslog daemon up publicly yet, but 
> if they have (*cough*) it'll probably run circles around syslog-ng.

Okay, okay, I recognize a sharp stick when I see it, mkay? :)

In summary, I run a fairly beefy log server, tried and ended up
throwing syslogd away, tried and threw syslog-ng[1] away after many 
hours of performance tweaking, and finally ended up rolling my own 
that suited my purposes.

Minirsyslogd is minimalistic, remote-only, and suitable for central 
log receivers that receive heaploads of syslog data from hundreds 
of hosts (in my case: firewalls, set in full audit mode).
It should work under "any" unix dialect.  It is public domain.

Basically, its only major "feature" is splitting the output based 
on IP address (directories) and date/hour (file names). 

Minor features include RFC3339 time stamps, zero mangling of 
the received events (yes, the facility/severity tag is left in
the events), and some other bits and pieces.  Read the man page;
it's full of useful information and explanations.

Homepage (as it is):
http://www.clueby4.org/minirsyslogd/

Download:
http://www.clueby4.org/minirsyslogd/minirsyslogd-1.02.tar.gz  (25 KB)

Enjoy,
/Mikael

-- 
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 ÖRNSKÖLDSVIK, Sweden
Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50       WWW: http://www.clavister.com

[1] Note to Balazs: I'm not out to slam syslog-ng. I happily use it 
    for local events on many boxes. I just report facts the way I see
    them and think that I've written something that is better for my
    specific scenario. If you think I'm wrong, I'm definitely game 
    for a more "official" speed comparison.
_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis