RE: ugliest application logs ever?
"Rainer Gerhards" <[email protected]> Thu, 24 Jan 2008 21:09:53 +0100
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <577465F99B41C842AAFBE9ED71E70ABA3087E3@grfint2.intern.adiscon.com> |
> > "Last message repeated" is always good, but oh, this is SO mine to win! ;) Actually, IMHO, the "Last message repeated n times" is not as bad as it sounds. It means that message immediately in front of it must be repeated n times when you run an analysis. Of course, you loose the timestamp of those previous n messages, but everything else is inact (else you wouldn't get that "repeated" message...). Some folks really like this message because it keeps their logs clean of repeated stuff (and it may save a lot of space if somtehing runs wild). Of course, there are many cases where the repeat logic does not make much sense. There are even cases where it makes no sense at all with a given output. Thus, with rsyslog ( http://www.rsyslog.com ), three is a simple -e (every) option that turns off this feature. Some outputs also disable it (for them) automatically, because they can not work well enough with that feature (I think the database writer turns it off, but I need to look that up... Well... Not an answer to the original question. Maybe my mumbling can be added to the useless message case ;) Rainer