Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • Oct 23 21:15
    zeflash74 starred syslog-ng/syslog-ng
  • Oct 23 20:47
    tommy24b commented #2981
  • Oct 23 19:36
    Travis mitzkia/syslog-ng (light_hypothesis) errored (753)
  • Oct 23 18:47
    tommy24b commented #2981
  • Oct 23 18:38
    tommy24b commented #2981
  • Oct 23 18:31
    tommy24b commented #2981
  • Oct 23 18:30
    tommy24b commented #2981
  • Oct 23 18:26
    tommy24b commented #2981
  • Oct 23 18:25
    tommy24b commented #2981
  • Oct 23 18:09
    bazsi commented #2982
  • Oct 23 11:19
    Travis mitzkia/syslog-ng (light_hypothesis) errored (752)
  • Oct 23 09:17
    mitzkia commented #2982
  • Oct 23 09:15
    mitzkia commented #2982
  • Oct 23 08:08
    Kokan unlabeled #2726
  • Oct 23 08:07
    Kokan assigned #2726
  • Oct 23 07:58
    Kokan closed #2460
  • Oct 23 07:58
    Kokan commented #2460
  • Oct 23 07:51
    Kokan closed #1151
  • Oct 23 07:51
    Kokan commented #1151
  • Oct 23 07:46
    Kokan closed #1492
Kókai Péter
@Kokan
when you use parser(es-checkpoint-parser) all of the places just points to one instance (well in reality there is a clonning mechanism)
ComputerFrek
@ComputerFrek
thanks for the advise
advice*
how about
Kókai Péter
@Kokan
the nasty thing I am not sure right now is about dbparser, as that has a state
ComputerFrek
@ComputerFrek
state?
is there an issue with dbparser? i tried writting the pattern and it seems working
im planning to write more to classifiy my logs
classify*
Kókai Péter
@Kokan
no, it is fine that you are using it
I was just not sure how it is cloned (internal stuff)
ComputerFrek
@ComputerFrek
oh
hahaha
performance lah
anyway
don't mind i ask one more question, in my scl, you saw i created new kv pairs
the huge chunk
i believe every keypair would be some form of variable in code right
do u think that creating these additional marcos would kill performance significantly?
Kókai Péter
@Kokan
I don't mind.
i'll see the config from that poitn of view
let me ask back, so you are afraid that remapping those values might have performance implication ?
ComputerFrek
@ComputerFrek
was wondering if it does
cox
from a code point of view
seems like declaring additional variables right
since when i use the kvparser already
i tried renaming the kv parser key
which there was some issues
Kókai Péter
@Kokan
well it is going to have some performance impact, and even memory as that could store twice the same information
but dbparser probably going to be the most heaviyweight here
ComputerFrek
@ComputerFrek
oh
hmmm
i see
Kókai Péter
@Kokan
btw in syslog-ng there is a parser called checkpoint, do you know that one ?
ComputerFrek
@ComputerFrek
that does not seems to be for the firewall traffic logs
i saw
Kókai Péter
@Kokan
too bad :(
ComputerFrek
@ComputerFrek
Its okay
hahah
i have fun playing around in syslog-ng
haha
ComputerFrek
@ComputerFrek
Hi again. Sorry for the trouble. I cannot specify two es destination with different names?
image.png
I am getting this errror
image.png
my log statements
image.png
Kókai Péter
@Kokan
hello, there is an option persist-name which you can use to specify different name for any destination
ComputerFrek
@ComputerFrek
hello