From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/1377 Path: news.gmane.org!not-for-mail From: "Daniel Clark" Newsgroups: gmane.comp.sysutils.supervision.general Subject: Re: svlogd / multilog -> SQL database Date: Fri, 23 Feb 2007 08:48:57 -0500 Message-ID: <5422d5e60702230548t3f6aaec2keb030bee78e005ec@mail.gmail.com> References: <5422d5e60701040842ta6e8de3v615d07b6fadea37d@mail.gmail.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Trace: sea.gmane.org 1172238561 28233 80.91.229.12 (23 Feb 2007 13:49:21 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Fri, 23 Feb 2007 13:49:21 +0000 (UTC) To: supervision@list.skarnet.org Original-X-From: supervision-return-1613-gcsg-supervision=m.gmane.org@list.skarnet.org Fri Feb 23 14:49:12 2007 Return-path: Envelope-to: gcsg-supervision@gmane.org Original-Received: from antah.skarnet.org ([212.85.147.14]) by lo.gmane.org with smtp (Exim 4.50) id 1HKanK-00012k-3s for gcsg-supervision@gmane.org; Fri, 23 Feb 2007 14:49:06 +0100 Original-Received: (qmail 1694 invoked by uid 76); 23 Feb 2007 13:49:27 -0000 Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Archive: Original-Received: (qmail 1688 invoked from network); 23 Feb 2007 13:49:27 -0000 DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=b5dGC/lEL4wMFH8hBMsM3a+agfSfKXGBV3v/JZWybfCIoJuAJ64LOZIX3/uedjKbLS13q5QgLn29GOme4eOmBo49UmiZCTxSpP1QRmDdcIdioulF0+SPCR5zl6OOon2+Zi1GD2QrJVcRbBI9DJnUysSyXYIIH/4lJC2CnEH0NEA= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=Vk881K7TgfYfGsRDofoe/qQd0sN2p8x3rFYMSDQqumzwlzGavuPl9UmbGUuVxd1suV2sn808HHnkrIzqgG/0VCOHSma5f9P32kNg5PWq5tzdMuyJBtJvW1O36qrekgl9Bwsi/yiuDPhfQt0KEoFTaxUuOOQ+3CbroiDBV3NDVAM= Original-Sender: djbclark@gmail.com In-Reply-To: Content-Disposition: inline X-Google-Sender-Auth: 867c6cf9a5d9f3d6 Xref: news.gmane.org gmane.comp.sysutils.supervision.general:1377 Archived-At: On 1/11/07, Charlie Brady wrote: > On Thu, 4 Jan 2007, Daniel Clark wrote: > > > Has anyone happened to have done any work to get svlogd/multilog data > > into a SQL database, such as PostgreSQL? > > I think what you mean to say is, has anyone written a logger which can be > used by supervise/runit in place of svlogd/multilog. It will read from > standard input, and write log records into an SQL database. > > I don't see where or why you'd use svlogd or multilog in that scenario. > > [I'd be concerned about reliability and load issues.] Yes, you are right; looking at this again, it seems like I would want to use socklog (with svlogd) on the client machines to get the logs to the central server [1]. So the question is, once this is done, what runs on the central server to get the information into PostgreSQL? Based on the rousing response to this thread, I'm guessing the answer is some script I go and write myself :-) > Alternatively, you might post-process svlogd log files into SQL (at normal > log rotation time, and from time to time otherwise), depending on what > analysis capabilities you are seeking. Yes, that would probably make the most sense. [1] http://smarden.org/socklog/network.html Thanks for the reply, -- Daniel Clark # http://dclark.us # http://opensysadmin.com