[rsyslog] rsyslog config file format - please provide feedback
rgerhards at hq.adiscon.com
Fri Sep 7 14:08:02 CEST 2007
I am replying here, but without a real reply. All feedback is deeply
appreciate, but I'd like to keep silent for the time being to avoid
bringing in my personal bias.
Please keep commenting. I'll do a wrap-up later.
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of seth vidal
> Sent: Friday, September 07, 2007 1:41 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] rsyslog config file format - please provide
> On Fri, 2007-09-07 at 13:32 +0200, Jan-Frode Myklebust wrote:
> > On 2007-09-06, Rainer Gerhards <rgerhards at hq.adiscon.com> wrote:
> > >
> > > http://rgerhards.blogspot.com/2007/09/rsyslog-config-again.html
> > >
> > > I would deeply appreciate any feedback on the samples and format
> > > suggestions.
> > /me thinks you're getting way too little feedback on the blog,
> > or this list. Unfortunately I don't have much more than simple
> > preference to contribute here..
> > XML-based format:
> > Yikes, you'll need an additional human readable frontend
> > format that's converted to XML for it to be usable. You
> > can't expect us poor sysadmins to be editing XML
> > directly to configure rsyslogd..
> The nice piece of this is that it is machine parseable easily which
> enables lots of useful editors.
> > syslog-ng like:
> > Fair enough.. It works for my usage.
> The syntax is okay but at that point what distinguishes b/t syslog-ng
> and rsyslog?
> > Apache like:
> > Not sure I understand this.. Seems like a mix of option/value
> > and xml'ish for some functionality.
> This one I'm more interested in. If you think of each log like a vhost
> and you define the qualities that are added to that inside the
> <Log mylogofsilliness>
> Destination /path/to/silly.log
> DestinationMode 0640
> DestinationOwner root
> DestinationGroup log-readers
> Include mail.info kern.debug cron.emerg
> etc, etc, etc
> maybe that doesn't make sense, maybe it does - it is pretty easy to
> read, though.
> rsyslog mailing list
More information about the rsyslog