Jim Johnson wrote: > Thanks Risto, > > I've actually implemented the pipe to logger as Hari suggested and that > seems to be doing what I want. Do you think I can still have data > integrity issues using the pipe instead of write or is logger smart > enough to know what to do? Thanks ...
hi Jim, if you are using /usr/bin/logger, your data integrity is guaranteed. This is because logger doesn't write to log files directly (like the SEC 'write' action does), but it rather hands the message over to syslogd for logging. Since in that case only syslogd has log file(s) open for writing, there can't be data integrity issues that can arise with multiple writers on one file. br, risto > > - Jim > > On Wed, Jul 9, 2008 at 5:11 AM, Risto Vaarandi <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> wrote: > > Jim, > unfortunately there is no way to modify the %t variable... However, > I have a few thoughts about your logging scheme. As I understood, > you are doing the logging through the 'write' action? If you would > like to have %t a different format because you are using 'write' for > appending data to the same files that syslogd is modifying, I would > strongly recommend to have a separate file for SEC-originated > messages. If two applications are simultaneously writing to the same > file, there are no guarantees for log data integrity! (For example, > a 'write' from SEC could partly overwrite a message that syslogd has > just logged). IMHO, if you are using a separate file for SEC > messages under /var/log, you can easily have a slightly different > timestamp -- and as for the host names, you can extract these with > appropriate regular expressions and include in 'write' messages as > $<number> variables. > hth, > risto > > Jim Johnson wrote: > > Hello, > > I've just started using SEC to find specific messages in a > number of WebSphere logs and send them to /var/log/messages to > be picked up and archived by another centralized logging > process. My issue is that I'd like the WebSphere messages to be > outputted with the proper timestamp / date format that other > entries in /var/log/messages already have. > > Current timestamp format for /var/log/messages entries: > > Jul 8 10:19:44 > > Timestamp format using %t in the write action: > > Tue Jul 8 11:43:58 2008 > > Is there a way to modify %t to display like the other entries? > Thanks ... > > - Jim > > p.s. - I'd also like to have the hostname added to the write > action as well so that these WebSphere log entries look like any > other syslog entry. Thanks in advance ... > > > > ------------------------------------------------------------------------ > > > ------------------------------------------------------------------------- > Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! > Studies have shown that voting for your favorite open source > project, > along with a healthy diet, reduces your potential for chronic > lameness > and boredom. Vote Now at http://www.sourceforge.net/community/cca08 > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Simple-evcorr-users mailing list > [email protected] > <mailto:[email protected]> > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users > > > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! > Studies have shown that voting for your favorite open source project, > along with a healthy diet, reduces your potential for chronic lameness > and boredom. Vote Now at http://www.sourceforge.net/community/cca08 > > > ------------------------------------------------------------------------ > > _______________________________________________ > Simple-evcorr-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users ------------------------------------------------------------------------- Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW! Studies have shown that voting for your favorite open source project, along with a healthy diet, reduces your potential for chronic lameness and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________ Simple-evcorr-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
