[colug-432] named pipe vs tail -F /path/to/file

[Seth Hall]

On Aug 3, 2012, at 12:17 AM, Travis Sidelinger <travissidelinger at gmail.com> wrote:

> 3. You could write your own syslog daemon that captures the syslog stream, handles the logging, and does the processing of log files.  With off the shelf modules, it's probably not that complicated.

There's an easier way if you are using syslog-ng.

http://www.balabit.com/sites/default/files/documents/syslog-ng-admin-guide_en.html/reference_destination_program.html

I know that some other syslogd implementations have similar options as well.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/