Re: Filtering socklog output revisited

Alex Efros <powerman <at> powerman.asdfGroup.com> writes:

> 
> Hi!
> 
> Can you provide more details about your task? Why you need to filter all
> data from socklog, why it's wrong to do it by parsing log files or by
> using svlogd's 'rotate processor' feature, etc.

Thank you.

We have a requirement on our site that certain IP addresses never appear
in any system logs.  I need to be able to alter the data going into
all our system log files so that whenever any of these IP addresses appear,
they get changed to  something like "xxx.xxx.xxx.xxx".  Other IP addresses
are allowed to appear in our log files without problem.

We can easily write a simple filter program which accepts data via stdin
and outputs it through stdout after having made these changes, and I was
hoping I could find a way to insert this program into the socklog processing
stream.

But based on the discussion I referred to above, that is not recommended,
and therefore, I posted this question here to see if perhaps there's some
other way to do this using socklog.

Does this clarify my query?


-- 
 Lloyd Zusman
 [email protected]
 God bless you.