Re: Syslog compatible output from socklog

> You could run your perl script as svlogd processor, this will affect the
> @4000* log files, but not the current log file.

Unfortunately, most of the log processors need to point at the "current"
file to do anything useful (realtime statistics, alert generation, etc).

> Another glitch in your proposed solution is the | in log/run, which
> should be avoided...

I'd already figured that one out, but I wasn't sure how to resolve the
problem -- the filter needs to sit between the output from socklog and
svlogd.

Thinking about it for a while, I've come up with a different solution:
leaving the socklog/svlogd combination untouched, and have a seperate
service (using perl's File::Tail module) follow the 'current' log and
generate syslog-style output to another svlogd.

If anyone else out there has run into a similar problem, I've put my filter
script online at <http://www.oddbit.com/software/sock2sys/>.

-- Lars

-- 
Lars Kellogg-Stedman <[email protected]>