From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/1166 Path: news.gmane.org!not-for-mail From: Vincent Danen Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: monitoring svlogd-produced logfiles Date: Wed, 14 Jun 2006 21:32:04 -0600 Organization: Annvix Message-ID: <20060615033204.GU898@annvix.org> References: <20060614233508.GP898@annvix.org> <20060614235909.GA20474@home.power> <20060615001005.GR898@annvix.org> <20060615002526.GC20474@home.power> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="YElNLjpQSt47mE23" X-Trace: sea.gmane.org 1150342368 31131 80.91.229.2 (15 Jun 2006 03:32:48 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Thu, 15 Jun 2006 03:32:48 +0000 (UTC) Original-X-From: supervision-return-1402-gcsg-supervision=m.gmane.org@list.skarnet.org Thu Jun 15 05:32:45 2006 Return-path: Envelope-to: gcsg-supervision@gmane.org Original-Received: from antah.skarnet.org ([212.85.147.14]) by ciao.gmane.org with smtp (Exim 4.43) id 1Fqib1-0008I0-BE for gcsg-supervision@gmane.org; Thu, 15 Jun 2006 05:32:39 +0200 Original-Received: (qmail 2342 invoked by uid 76); 15 Jun 2006 03:33:00 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 2335 invoked from network); 15 Jun 2006 03:33:00 -0000 Original-To: supervision@list.skarnet.org Content-Disposition: inline In-Reply-To: <20060615002526.GC20474@home.power> X-Mailer: Mutt 1.5.x/OS X 10.4.x X-PGP-Key: http://linsec.ca/vdanen.asc X-URL: http://annvix.org/ User-Agent: Mutt/1.5.10i X-SA-Exim-Connect-IP: 68.149.37.7 X-SA-Exim-Mail-From: vdanen@annvix.org X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on hades.annvix.org X-Spam-Level: X-Spam-Status: No, score=-1.4 required=6.0 tests=ALL_TRUSTED autolearn=ham version=3.1.0 X-SA-Exim-Version: 4.2 (built Wed, 01 Feb 2006 18:29:36 -0700) X-SA-Exim-Scanned: Yes (on hades.annvix.org) Xref: news.gmane.org gmane.comp.sysutils.supervision.general:1166 Archived-At: --YElNLjpQSt47mE23 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Alex Efros [2006-06-15 03:25:26 +0300]: > On Wed, Jun 14, 2006 at 06:10:05PM -0600, Vincent Danen wrote: > > No, I do need svlogd to write to disk. Well, maybe not. I'm using >=20 > You'd better clarify itself, to write or not to write. ;-) Sorry... I write like I think, which is "out loud".. =3D) > > /dev/log... can I have two socklog processes doing that?) >=20 > You don't need two socklog reading from /dev/log. ;) Anyway, it's unix > socket, not a fifo... I don't think you can have two listeners on single > unix socket. Oh yes, right, sorry. duh. nevermind... been a long day... =3D) > > No, I need svlogd to write the logs to disk. In addition to the on-disk > > logs, I want something to process those logs in realtime... to make a > > summary log and something that I can have sitting open writing matched > > entries to STDOUT so I can view it over ssh on my desktop... in > > realtime. >=20 > Duplicating messages to STDERR from svlogd will allow you to receive them > in realtime. I didn't realize svlogd could do that. Very good to know. > > What does <> do? I've never seen that notation before. >=20 > man bash. > Open read/write to workaround case there nobody open this fifo for writin= g yet. Cool, thanks. Good to know. > > BTW, I think I sent the response on the "tail -F" thing to you and not > > the list... to summ, I did try "-n 0 -F" and it didn't follow. Could be > > a swatch thing tho... I'll have to try it again and see if it still > > doesn't work. If it doesn't, I still need to find an alternative to it, > > so any suggestions are welcome. >=20 > Yep. To summ my reply :) I suggest using script-wrapper around tail to > a) force needed params for tail > b) debug which param swatch try to use when running tail (without hard > things like strace) Well, I can see what swatch is doing just by executing ps... I can see that it calls it with the right args. I'll see tomorrow if it picks up the new ./current file after it rotates (about another 300k left before it rotates). Thanks for the brain prods... =3D) --=20 {FEE30AD4 : 7F6C A60C 06C2 4811 FA1C A2BC 2EBC 5E32 FEE3 0AD4} mysql> SELECT * FROM users WHERE clue > 0; Empty set (0.00sec) :: Annvix - Secure Linux Server: http://annvix.org/ :: --YElNLjpQSt47mE23 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iD8DBQFEkNSzLrxeMv7jCtQRAmg+AJ0YXKD/wtMIijWltqtiObbDNbVhnQCgtMD9 nQFf5ptzdl+MTim4EiYAJmo= =SGCD -----END PGP SIGNATURE----- --YElNLjpQSt47mE23--