[Date Prev] [Date Index] [Date Next] [Thread Prev] [Thread Index] [Thread Next]

RE: Log consolidation?

Chris Fowler ChrisF@computone.com
Tue, 14 Aug 2001 04:13:52 -0700 (PDT)

Title: RE: Log consolidation?

I implemented some code that would do this outside of conserver.  but, you lost the replay feature.  It is possible to send all the logs to syslog.

-----Original Message-----
From: Martin Siegert [mailto:siegert@sfu.ca]
Sent: Monday, August 13, 2001 9:59 PM
To: Matt Cheek
Cc: 'users@conserver.com'
Subject: Re: Log consolidation?

On Mon, Aug 13, 2001 at 01:15:08PM -0400, Matt Cheek wrote:
> I'm running Conserver 7.0.3 (and will be upgrading to 7.1.1 any day now.) I
> currently have 113 managed consoles and, as a result, have 113 distinct
> logfiles, one per console. I have been looking at swatch
> (http://oit.ucsb.edu/~eta/swatch/) as a way of keeping an eye out for
> various "events" that I would like to be notified of. For instance, a full
> file system, a failing or failed disk, etc. (Most of my consoles are UNIX
> boxes.) However, swatch is able to watch only a single file. In order to
> watch all my consoles, I have to run 113 instances of swatch (BTW, swatch is
> a perl script.). Is there a way to send some or all of my console logs to
> syslog (in addition to or instead of individual log files). I would love to
> continue to have all the individual log files PLUS be able to also point all
> console output to a specific syslog "facility.level" so syslog could
> aggregate the records into a single file that swatch could watch.
> Any ideas? In the meantime, I'm going to try firing up a whole bunch of
> swatch processes. :-)

You could try logcheck (www.psionic.com) instead of swatch. logcheck
works with several log files.


Martin Siegert
Academic Computing Services                        phone: (604) 291-4691
Simon Fraser University                            fax:   (604) 291-4242
Burnaby, British Columbia                          email: siegert@sfu.ca
Canada  V5A 1S6
users mailing list