Re: [evlog-dev] Program name issue

Hi Seo,

May I ask you how did you log the events to evlog? did they come from 
syslogat api or you just turned on the syslog forwarder?

Notes: For more information about syslogat see man page for evlgentmpls.

Thanks, Hien.


O'Riordain, Seosamh wrote:
> Hi,
> 
> I've been looking at using evlog as a replacement for syslog, and also
> for being a central log consolidator. Now it provides plenty of 
> excellent features that
> I can and want to use. The only thing it doesn't provide compared to 
> syslog, is the program
> name. See below, for a comparison in output of syslog and evlog created 
> by doing an rsh
> to a machine.
> 
> /var/log/messages extract
> Oct 30 11:33:46 angel2 pam_rhosts_auth[27509]: allowed to root@angel3 as 
> root
> Oct 30 11:33:46 angel2 login(pam_unix)[27510]: session opened for user 
> root by (uid=0)
> Oct 30 11:33:46 angel2 login -- root[27510]: ROOT LOGIN ON pts/1 FROM 
> angel3
> 
> evlview -n --syslog
> Oct 30 11:33:46 angel2 allowed to root@angel3 as root
> Oct 30 11:33:46 angel2 session opened for user root by (uid=0)
> Oct 30 11:33:46 angel2 ROOT LOGIN ON pts/1 FROM angel3
> 
> On the central log server, when viewing the logs for this host (current 
> or archived) one would
> not be able to tell what program caused these or whether one used rsh or 
> some other login mechanism,
> say ssh.
> 
> My questions become, was this a deliberate decision not to provide the 
> program name
> in evlog ?
> What would it take to provide this functionality ?
> Thanks.
> 
> /Regards/Seo
> 




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/