[logs] minirsyslogd v1.02 available

From: Mikael Olsson (mikael.olsson@private)
Date: Wed Oct 29 2003 - 17:31:17 PST

  • Next message: Balazs Scheidler: "Re: [logs] minirsyslogd v1.02 available"

    Paul Robertson wrote:
    > I don't know if syslog-ng is the paragon of syslog performance, but 
    > I'd doubt it.  I don't know if someone on this list has put their 
    > really fast UDP over the network syslog daemon up publicly yet, but 
    > if they have (*cough*) it'll probably run circles around syslog-ng.
    Okay, okay, I recognize a sharp stick when I see it, mkay? :)
    In summary, I run a fairly beefy log server, tried and ended up
    throwing syslogd away, tried and threw syslog-ng[1] away after many 
    hours of performance tweaking, and finally ended up rolling my own 
    that suited my purposes.
    Minirsyslogd is minimalistic, remote-only, and suitable for central 
    log receivers that receive heaploads of syslog data from hundreds 
    of hosts (in my case: firewalls, set in full audit mode).
    It should work under "any" unix dialect.  It is public domain.
    Basically, its only major "feature" is splitting the output based 
    on IP address (directories) and date/hour (file names). 
    Minor features include RFC3339 time stamps, zero mangling of 
    the received events (yes, the facility/severity tag is left in
    the events), and some other bits and pieces.  Read the man page;
    it's full of useful information and explanations.
    Homepage (as it is):
    http://www.clueby4.org/minirsyslogd/minirsyslogd-1.02.tar.gz  (25 KB)
    Mikael Olsson, Clavister AB
    Storgatan 12, Box 393, SE-891 28 ÖRNSKÖLDSVIK, Sweden
    Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
    Fax: +46 (0)660 122 50       WWW: http://www.clavister.com
    [1] Note to Balazs: I'm not out to slam syslog-ng. I happily use it 
        for local events on many boxes. I just report facts the way I see
        them and think that I've written something that is better for my
        specific scenario. If you think I'm wrong, I'm definitely game 
        for a more "official" speed comparison.
    LogAnalysis mailing list

    This archive was generated by hypermail 2b30 : Wed Oct 29 2003 - 17:47:06 PST