4 ms·
Another alternative to regular expression based message parsing that has native support within syslog-ng: patterndb (http://www.balabit.com/network-security/sys
by lsh 12y ago
Another alternative to regular expression based message parsing that has native support within syslog-ng: patterndb (http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/features/pattern-db http://www.balabit.com/network-security/syslog-ng/opensource...)
Very fast and a bit complex to setup, but well documented and well tooled. Mature. It could do with some more community love, tbh.
- zhenjl 12y agoThanks for the link. Do you have any info on the performance of this parser?
- lsh 12y agoI'm sorry to say I do not. I've only very recently got a stable monitoring configuration in place with this as a key piece, parsing up messages and sending them to downstream programs. I welcome the move away from regular expressions though - they are just not necessary in this particular domain. We'll see if PatternDB's coarse grained approach comes back to bite me. I'm happy to help as I can if you decide to use PatternDB - you can find me at l.skibinski at elifesciences dot org. I have some notes for getting started quickly I really should publish ...