[phpLogCon] which log repository, mysql database or regular file?

[Rainer Gerhards]

> -----Original Message-----
> From: phplogcon-bounces at lists.adiscon.com [mailto:phplogcon-
> bounces at lists.adiscon.com] On Behalf Of Andre Lorbach
> Sent: Thursday, May 19, 2011 10:10 AM
> To: Kaiwang Chen
> Cc: phplogcon at lists.adiscon.com
> Subject: Re: [phpLogCon] which log repository,mysql database or regular
> file?
> 
> Both have their advantages. However using a Mysql Database as log-store
> will
> improve searching and reporting performance within LogAnalyzer, as the
> main
> filtering is done by the MySQL Server.

And the dual view is that from the front-end perspective (e.g. syslogd),
there obviously is much more time required to get records into the database
vs. flat files. There really is no general answer (except, of course, when
your message rate outgrows your system's capability to do database inserts).

Rainer

> Have syslogmessages in simple files is easy to setup and sufficient for
> single systems with average syslog load.
> 
> Best regards,
> Andre Lorbach
> 
> 
> > -----Original Message-----
> > From: Kaiwang Chen [mailto:kaiwang.chen at gmail.com]
> > Sent: Mittwoch, 18. Mai 2011 17:36
> > To: Andre Lorbach
> > Cc: phplogcon at lists.adiscon.com
> > Subject: Re: [phpLogCon] which log repository, mysql database or
> regular
> > file?
> >
> > Yes, but I became interested in the survey of deployment. Any idea?
> >
> > Thanks,
> > Kaiwang
> >
> > 2011/5/18 Andre Lorbach <alorbach at ro1.adiscon.com>:
> > > From your other email, it looks like that the php mysql extensions
> are
> > > missing.
> > > For the advanced LogAnalyzer UserDB System, a mysql db us
> mandatory.
> > > This does not has any effect on the logstream sources. You can
> still
> > > use simple logfiles as logsource instead of mysql data.
> > >
> > > Best regards,
> > > Andre Lorbach
> > >
> > >> -----Original Message-----
> > >> From: phplogcon-bounces at lists.adiscon.com [mailto:phplogcon-
> > >> bounces at lists.adiscon.com] On Behalf Of Kaiwang Chen
> > >> Sent: Mittwoch, 18. Mai 2011 15:01
> > >> To: phplogcon at lists.adiscon.com
> > >> Subject: [phpLogCon] which log repository, mysql database or
> regular
> file?
> > >>
> > >> Hello,
> > >>
> > >> Actually, this is not a log analyzer issue. I am just wondering if
> > >> the
> > > MySQL-
> > >> way is better than simple files. Is there any discussion around?
> > >> BTW, I use rsyslogd(rsyslog-3.22.1-3.el5_5.1) as log receiver.
> > >>
> > >> Thanks,
> > >> Kaiwang
> > >> _______________________________________________
> > >> phpLogCon mailing list
> > >> http://lists.adiscon.net/mailman/listinfo/phplogcon
> > >> http://www.phplogcon.org
> > >
> _______________________________________________
> phpLogCon mailing list
> http://lists.adiscon.net/mailman/listinfo/phplogcon
> http://www.phplogcon.org