[evlog-dev] --ANNOUNCE-- evlog-1.5.0 is available
Larry Kessler <[email protected]> Fri, 13 Dec 2002 17:24:58 -0800
| Newsgroups | gmane.linux.kernel.event-logging |
|---|---|
| Message-ID | <[email protected]> |
http://evlog.sourceforge.net/
New Features:
1) A "plug-in" capability has been added so that customized
"event handlers" can register with evlogd to receive the
event stream and provide alternative processing and handling
of event records in addition to, or instead of, the standard
logging/notification mechanism.
2) 2 plug-ins are provided for forwarding events from multiple
hosts to a centralized "event consolidation" host:
· A UDP-based plug-in for "syslog-equivalent" event
forwarding
· A TCP-based plug-in using password-authentication when
a more reliable protocol is desired.
Logging of events to the local log files continues when one of
these plug-ins is used, unless local logging is disabled.
A new evlogrmtd daemon runs on the "event consolidation host",
accepts events only from hosts in its evlhosts file, and passes
them to evlogd for logging to the event consolidator's local
log file. The evlogrmtd simultaneously handles events sent both
via UDP and TCP.
evlog-1.5.0 does not provide data encryption, and all of the
hosts must be the same architecture. Future releases will
provide encryption and support mixed-architecture environments.
3) The evlview command now displays the hostname (local, or if
event originated in another host, its hostname). Also "host"
is a "pseudo attribute" than can be used in filter expressions.
4) Added a new user-space logging macro, syslogat(), which will
write a message to syslog, and based on how the format string
is written, write additional named-attributes to the event log
as a POSIX_LOG_PRINTF log_format event record.
POSIX_LOG_PRINTF event records are new in this release, and
this log_format keeps the format string separated from the varargs,
thus providing many more formatting possibilities during
post-processing.
A new utility, evlgentmpls, is provided which generates formatting
templates from the .log section in .o files using syslogat().
A kernel equivalent of syslogat() for prink will be released in
early 2003.
5) Added -q, --nmeqval option to evlview, which for records that
have associated formatting templates, displays the non-standard
attributes in name=value format, one attribute per line.
6) Added -F, --force to evlfacility command to not report an error
if a facility is already in the facility registry with the correct
facility code.
7) Several formatting template changes/additions:
· support of const structs in templates
· .to file names are now in hex, instead of decimal
· default templates are not called default.to, instead of =1.to
· if EVLTMPLPATH is not set, look in /var/evlog/$LANG before
/var/evlog/templates. This allows multiple versions of a template
to exist on a system, optionally under control of the $LANG
environment variable (for multi-language support).
8) A HOW TO section has been added to the website. Instructions
are provided for:
· Setting-up event logging to run in a RAM disk
· (COMING SOON) Implementing an event handler plug-in
· (COMING SOON)Generation and installing formatting templates using
syslogat() and evlgentmpls utility.
-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/