On Sat, 12 Apr 2008, Tejas Patel wrote:

> Hello,
>
> First of all I'd like to thank Risto for this wonderful tool. It seems very 
> flexible and will help me do the job quiet nicely. I also would like to thank 
> the many users of this list who have taken the time to answer many questions 
> posted. They have been very helpful.
>
> Now, I'm new to sec.pl and trying to learn the tool and make the best use of 
> it. I'd like to monitor multiple log files (about 50 on each box) on multiple 
> solaris boxes (about 10). I'm trying to write a monitoring solution that logs 
> to one file on a nfs mounted drive. I'm using the same single config file on 
> all 10 hosts. Therefore, I'll need to obtain the hostname and log filename 
> and write them to the single sec output log.
>
> I'd like my output format to be like this:
> <hostname>:<log_filename> | <message>
>
> I've figured out how to get the log_filename and the message and write that. 
> I'm not able to figure out how to obtain the current hostname. I've read the 
> manpage and searched the archive but I obviously am not searching for the 
> correct string. I'm sure this is answered somewhere. It would help if the 
> solution is less resource intensive since I expect this to be under heavy 
> load.
>
> Can someone be kind enough to point me in the right direction?
>
> Thanks in advance,

there may be a cleaner way to do it, but if all else fails you can setup 
an action to take place on startup to do something like

eval %o ($hostname=`hostname`)

and then use $hostname in your other statements.

David Lang


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to