[phpLogCon] which log repository, mysql database or regular file?

[Kaiwang Chen]

Great. I'd better use mysql to store logs, otherwise I should have to
maintain both a mysql instance for UserDB and plain file repository.

Thanks,
Kaiwang

2011/5/19 Rainer Gerhards <rgerhards at hq.adiscon.com>:
>> -----Original Message-----
>> From: phplogcon-bounces at lists.adiscon.com [mailto:phplogcon-
>> bounces at lists.adiscon.com] On Behalf Of Andre Lorbach
>> Sent: Thursday, May 19, 2011 10:10 AM
>> To: Kaiwang Chen
>> Cc: phplogcon at lists.adiscon.com
>> Subject: Re: [phpLogCon] which log repository,mysql database or regular
>> file?
>>
>> Both have their advantages. However using a Mysql Database as log-store
>> will
>> improve searching and reporting performance within LogAnalyzer, as the
>> main
>> filtering is done by the MySQL Server.
>
> And the dual view is that from the front-end perspective (e.g. syslogd),
> there obviously is much more time required to get records into the database
> vs. flat files. There really is no general answer (except, of course, when
> your message rate outgrows your system's capability to do database inserts).
>
> Rainer
>
>> Have syslogmessages in simple files is easy to setup and sufficient for
>> single systems with average syslog load.
>>
>> Best regards,
>> Andre Lorbach
>>
>>
>> > -----Original Message-----
>> > From: Kaiwang Chen [mailto:kaiwang.chen at gmail.com]
>> > Sent: Mittwoch, 18. Mai 2011 17:36
>> > To: Andre Lorbach
>> > Cc: phplogcon at lists.adiscon.com
>> > Subject: Re: [phpLogCon] which log repository, mysql database or
>> regular
>> > file?
>> >
>> > Yes, but I became interested in the survey of deployment. Any idea?
>> >
>> > Thanks,
>> > Kaiwang
>> >
>> > 2011/5/18 Andre Lorbach <alorbach at ro1.adiscon.com>:
>> > > From your other email, it looks like that the php mysql extensions
>> are
>> > > missing.
>> > > For the advanced LogAnalyzer UserDB System, a mysql db us
>> mandatory.
>> > > This does not has any effect on the logstream sources. You can
>> still
>> > > use simple logfiles as logsource instead of mysql data.
>> > >
>> > > Best regards,
>> > > Andre Lorbach
>> > >
>> > >> -----Original Message-----
>> > >> From: phplogcon-bounces at lists.adiscon.com [mailto:phplogcon-
>> > >> bounces at lists.adiscon.com] On Behalf Of Kaiwang Chen
>> > >> Sent: Mittwoch, 18. Mai 2011 15:01
>> > >> To: phplogcon at lists.adiscon.com
>> > >> Subject: [phpLogCon] which log repository, mysql database or
>> regular
>> file?
>> > >>
>> > >> Hello,
>> > >>
>> > >> Actually, this is not a log analyzer issue. I am just wondering if
>> > >> the
>> > > MySQL-
>> > >> way is better than simple files. Is there any discussion around?
>> > >> BTW, I use rsyslogd(rsyslog-3.22.1-3.el5_5.1) as log receiver.
>> > >>
>> > >> Thanks,
>> > >> Kaiwang
>> > >> _______________________________________________
>> > >> phpLogCon mailing list
>> > >> http://lists.adiscon.net/mailman/listinfo/phplogcon
>> > >> http://www.phplogcon.org
>> > >
>> _______________________________________________
>> phpLogCon mailing list
>> http://lists.adiscon.net/mailman/listinfo/phplogcon
>> http://www.phplogcon.org
>