[rsyslog] RFC: inconsistent hostname in different sources

Rainer Gerhards rgerhards at hq.adiscon.com
Tue Jan 22 13:13:04 CET 2013

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Radu Gheorghe
> Sent: Tuesday, January 22, 2013 1:09 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] RFC: inconsistent hostname in different sources
> Hi Rainer,
> I think old, inconsistent functionality shouldn't stand in the way of
> performance improvements. However, the backwards-incompatible change
> would break some configs. So maybe there's a nice way to change things.
> How about deprecating imtcp and providing a new module with consistent
> hostname handling?

Doesn't change the need to carry these things over in the core. Also, I think most people will actually be puzzled right now by the inconsistency .- or better said: do not know them and wonder why there rules do not match properly.

I have worked around some of the performance implications this morning and got at least some savings, and could do so if we continue to use the inconsistence (even with imtcp), but...

> Or, could rsyslog analyze the hostnames provided when parsing the config,
> and if they're uppercase, throw a warning message and lowercase them?
In the light of potential user confusion, I guess this is the best idea. Isn't it? Anybody else chime in?

> Best regards,
> Radu
> 2013/1/22 Rainer Gerhards <rgerhards at hq.adiscon.com>
> > Hi all,
> >
> > while looking for optimization opportunities, I found that some imtcp
> > returns hostnames inconsistent with what the other modules do. In all
> > modules but imtcp, the hostname is normalized, that is converted to
> > all lower case. However, in imtcp this normalization is not done.
> >
> > I would like to combine the hostname handling, which also provides
> > some nice performance improvement opportunities (I can do more
> > preprocessing inside the cache module). However, this means we need to
> > have a consistent handling. As the vast majority of modules converts
> > to lower case, I would do that in all cases in the future.
> >
> > Questions now:
> > 1) Is converting hostnames to lower case a good choice?
> > 2) Do I break to much with this change? Aka: must the inconsistency be
> > preserved?
> >
> > Feedback appreciated.
> >
> > Thanks,
> > Rainer
> >
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL:
> This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond

More information about the rsyslog mailing list