[colug-432] named pipe vs tail -F /path/to/file

Seth Hall seth at icir.org
Fri Aug 3 20:33:56 EDT 2012


On Aug 3, 2012, at 12:17 AM, Travis Sidelinger <travissidelinger at gmail.com> wrote:

> 3. You could write your own syslog daemon that captures the syslog stream, handles the logging, and does the processing of log files.  With off the shelf modules, it's probably not that complicated.

There's an easier way if you are using syslog-ng.

http://www.balabit.com/sites/default/files/documents/syslog-ng-admin-guide_en.html/reference_destination_program.html

I know that some other syslogd implementations have similar options as well.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro-ids.org/




More information about the colug-432 mailing list