On 06/09/06 12:31, Darren J Moffat wrote:
What problem does this solve ?
Trawling syslog files with miserable Perl scripts and the like, trying to rebuild structure from a not very well-formed or structured ascii text. Writing a syslog event monitor should not involve grokking around in that mess. The overlaying suggestion is just a hairbrained thought towards being able to make the structured format extensible while still exposing a traditional syslog look and feel (ie, rubbish) to those who want it!
We already have binary audit files that "BSM" audit creates and for Solaris 10 added the ability to export them in XML.
They don't duplicate the info in the syslog files though? Gavin _______________________________________________ networking-discuss mailing list [email protected]
