From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.comp.sysutils.supervision.general/1571
Path: news.gmane.org!not-for-mail
From: Charlie Brady <charlieb-supervision@budge.apana.org.au>
Newsgroups: gmane.comp.sysutils.supervision.general
Subject: Re: svlogd research
Date: Fri, 16 Nov 2007 15:10:44 -0500 (EST)
Message-ID: <Pine.LNX.4.64.0711161505260.9811@e-smith.charlieb.ott.istop.com>
References: <20071116195717.GA10933@recycle.lbl.gov>
NNTP-Posting-Host: lo.gmane.org
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Trace: ger.gmane.org 1195243856 27279 80.91.229.12 (16 Nov 2007 20:10:56 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Fri, 16 Nov 2007 20:10:56 +0000 (UTC)
Cc: supervision@list.skarnet.org
To: Larry Doolittle <ldoolitt@recycle.lbl.gov>
Original-X-From: supervision-return-1806-gcsg-supervision=m.gmane.org@list.skarnet.org Fri Nov 16 21:11:02 2007
Return-path: <supervision-return-1806-gcsg-supervision=m.gmane.org@list.skarnet.org>
Envelope-to: gcsg-supervision@gmane.org
Original-Received: from antah.skarnet.org ([212.85.147.14])
	by lo.gmane.org with smtp (Exim 4.50)
	id 1It7Wl-0004ip-Ik
	for gcsg-supervision@gmane.org; Fri, 16 Nov 2007 21:10:59 +0100
Original-Received: (qmail 1890 invoked by uid 76); 16 Nov 2007 20:11:03 -0000
Mailing-List: contact supervision-help@list.skarnet.org; run by ezmlm
List-Post: <mailto:supervision@list.skarnet.org>
List-Help: <mailto:supervision-help@list.skarnet.org>
List-Unsubscribe: <mailto:supervision-unsubscribe@list.skarnet.org>
List-Subscribe: <mailto:supervision-subscribe@list.skarnet.org>
List-Archive: <http://www.skarnet.org/lists/>
Original-Received: (qmail 1884 invoked from network); 16 Nov 2007 20:11:03 -0000
X-X-Sender: charlieb@e-smith.charlieb.ott.istop.com
In-Reply-To: <20071116195717.GA10933@recycle.lbl.gov>
Xref: news.gmane.org gmane.comp.sysutils.supervision.general:1571
Archived-At: <http://permalink.gmane.org/gmane.comp.sysutils.supervision.general/1571>


On Fri, 16 Nov 2007, Larry Doolittle wrote:

> I want both a reliable local log, and an encrypted (via stunnel) remote 
> log, where I can't control the reliability of the remote logging machine 
> (or the network path to it).

My recommendation is that you log locally and periodically (often) mirror 
the log directory remotely. The mirror algorithm could use the fact that 
'current' can only grow or be renamed. IIUC, all you need to do is send 
any log file not already on the remote server and then send either all of 
current, or the balance of current, depending on whether rotation has 
occurred since the last mirror cycle.

Or you could just rsync, which will be a little more wasteful.