[rsyslog] does rsyslog supports data analytic

[Josh Zhao]

Thanks Rainer. The basic purpose is statistics,which can accumulate some
fields of msgs,but I think the customers have more weird requirements.

2009/9/11 Rainer Gerhards <rgerhards at hq.adiscon.com>

> Now that I got an idea of how this could be implemented with current
> rsyslog technology, I would be interested in some more details of what
> you intend to do with the processing module. What exactly will it do
> with the message? I am asking because I would like to see a real use
> case. Thinking about the scenario I have proposed in my last mail, I
> think I see some pitfalls and I am not sure if they will cause any
> trouble in real projects.
>
> So I would appreciate if you could provide more in-depth info.
>
> Thanks,
> Rainer
>
> On Thu, 2009-09-10 at 21:25 +0800, Josh Zhao wrote:
> > Thanks for David and Rainer's reply.I m sorry that I did not explain my
> > question clearly.I m new to rsyslog and want to add a processing module
> in
> > rsyslog.The rsyslog has input plugins(front-end) and output
> > plugins(back-end).My processing module receives data from input plugins
> and
> > output the processed data and raw data both into output plugins.So how I
> add
> > it?
> >
> >
> > 2009/9/10 Rainer Gerhards <rgerhards at hq.adiscon.com>
> >
> > > > -----Original Message-----
> > > > From: rsyslog-bounces at lists.adiscon.com
> > > > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of
> david at lang.hm
> > > > Sent: Thursday, September 10, 2009 8:26 AM
> > > > To: rsyslog-users
> > > > Subject: Re: [rsyslog] does rsyslog supports data analytic
> > >
> > > > >  PS: i browse the git source code, but i can't understand why the
> > > > >
> > > > Experimental-lockfree<http://git.adiscon.com/?p=rsyslog.git;a=
> > > shortlog;h=refs/heads/Experimental-lockfree>
> > > > > is
> > > > > not adopted?
> > > >
> > > > I believe that it boils down to complications in being sure
> > > > that there are
> > > > no bugs, and the fact that even without that there has been a
> > > > LOT of room
> > > > for improvement from the early 3.x timeframe to the current
> > > > 5.x version.
> > > >
> > > > I expect that after the current round of improvements are
> > > > settled that
> > > > aspect of things will get reexamined.
> > >
> > > That branch is mostly there for historical reasons. I keep that branch
> as a
> > > think-tank, but it is is obsoleted. Also, in less polite words than
> David
> > > used, it simply doesn't work. Getting this code with multiple producers
> and
> > > consumers correct is far from being trivial and the literature I
> browsed
> > > indicates that it is probably not possible given the other predicates
> the
> > > code must obey to. Still, optimization is high up on the todo list.
> > >
> > > Rainer
> > > _______________________________________________
> > > rsyslog mailing list
> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > > http://www.rsyslog.com
> > >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>