Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The Tuesday 2007-04-24 at 15:31 +0200, Joachim Schrod wrote:
I don't think there's a source modification needed for syslog-ng.
One can specify $LEVEL in a template() clause in a destination section. E.g.
destination d_file {
file("/var/log/messages");
template("$HOUR:$MIN:$SEC $TZ $HOST [$LEVEL] $MSG\n");
template_escape(no);
}
(This is taken straight from the syslog-ng documentation in
/usr/share/doc/packages/syslog-ng/syslog-ng.pdf.
Gosh! I neglected looking in there. I thought the man page was complete! :-/
I would add some more
information like $DATE and $FACILITY. ;-)
$LEVEL expands to the name of the level and not to a number, though.
At least, it is something. I have seen, elsewhere, vievers that could sort
on the priority, display in different colours, or simply hide lower
priority messages as the user chooses.
For one of our customers, my staff implemented a syslog-ng based
management that stores the records in a PostgreSQL database, with
an associated web interface that allows filtering, sorting, and
appropriate visualization of log records, just as you mentioned.
That's why I knew that there must be a possibility to record the
level, it's one field in the database scheme that's used for
filtering and visualization.
Actually, I discuss since several months with this customers if we
shouldn't release that application and the associated management
processes as Open Source. The technical department has no problems
with that -- it ain't an application that's in core of their
business, after all. The legal department has lots of qualms,
though; they are concerned about indemnification and warranty,
especially in the case of nuisance lawsuits. It will need lots of
discussions. (Everytime I read on Groklaw that the SCO attack is a
thing of the past, I recognize that I'm working in a different
world. A world where that lawsuit still shows lots of effect.)
Best,
Joachim
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Joachim Schrod Email: [EMAIL PROTECTED]
Roedermark, Germany
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]