Anton Aylward wrote:
Under my desk is one of the crapped out 800Mhz box from the Closet of Anxieties. Its running a DNS server for the other such boxes. The DNS loads a huge set from http://pgl.yoyo.org/as/serverlist.php This morging I watched it load and saw ...
Feb 8 10:04:33 server named-checkconf[1810]: zone ad2.lupa.cz/IN: loaded serial 2012100600 Feb 8 10:04:33 server named-checkconf[1810]: zone ad2.mamma.com/IN: loaded serial 2012100600 Feb 8 10:04:33 server rsyslogd-2177: imuxsock begins to drop messages from pid 1810 due to rate-limiting Feb 8 10:04:35 server rsyslogd-2177: imuxsock lost 268 messages from pid 1810 due to rate-limiting
Even this crappy old machine can outpace the syslog daemon writing to a text file.
It didn't exactly outpace it, it was just your rate-limit that kicked in.
Now some of my clients are using syslog to monitor networks of hundreds of machines. And in order to mine the data they are sticking it into a database so they can perform queries on it, ones that are more involved than you can do with grep and regular expressions.
Text files can't cut it any more.
It depends entirely on your requirements. If you need to do data-mining on the log-data, yes, logging directly to a database might be a reasonable solution. If logs are kept mainly to satisfy auding rules, logging to a database would be way overkill. -- Per Jessen, Zürich (15.1°C) http://www.dns24.ch/ - free DNS hosting, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org