Thanks Risto,
I've actually implemented the pipe to logger as Hari suggested and that
seems to be doing what I want. Do you think I can still have data integrity
issues using the pipe instead of write or is logger smart enough to know
what to do? Thanks ...
- Jim
On Wed, Jul 9, 2008 at 5:11 AM, Risto Vaarandi <[EMAIL PROTECTED]>
wrote:
> Jim,
> unfortunately there is no way to modify the %t variable... However, I have
> a few thoughts about your logging scheme. As I understood, you are doing the
> logging through the 'write' action? If you would like to have %t a different
> format because you are using 'write' for appending data to the same files
> that syslogd is modifying, I would strongly recommend to have a separate
> file for SEC-originated messages. If two applications are simultaneously
> writing to the same file, there are no guarantees for log data integrity!
> (For example, a 'write' from SEC could partly overwrite a message that
> syslogd has just logged). IMHO, if you are using a separate file for SEC
> messages under /var/log, you can easily have a slightly different timestamp
> -- and as for the host names, you can extract these with appropriate regular
> expressions and include in 'write' messages as $<number> variables.
> hth,
> risto
>
> Jim Johnson wrote:
>
>> Hello,
>>
>> I've just started using SEC to find specific messages in a number of
>> WebSphere logs and send them to /var/log/messages to be picked up and
>> archived by another centralized logging process. My issue is that I'd like
>> the WebSphere messages to be outputted with the proper timestamp / date
>> format that other entries in /var/log/messages already have.
>>
>> Current timestamp format for /var/log/messages entries:
>>
>> Jul 8 10:19:44
>>
>> Timestamp format using %t in the write action:
>>
>> Tue Jul 8 11:43:58 2008
>>
>> Is there a way to modify %t to display like the other entries? Thanks ...
>>
>> - Jim
>>
>> p.s. - I'd also like to have the hostname added to the write action as
>> well so that these WebSphere log entries look like any other syslog entry.
>> Thanks in advance ...
>>
>>
>> ------------------------------------------------------------------------
>>
>> -------------------------------------------------------------------------
>> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
>> Studies have shown that voting for your favorite open source project,
>> along with a healthy diet, reduces your potential for chronic lameness
>> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Simple-evcorr-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
>>
>
>
-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
