Re: [exim] Don't split syslog lines

Pàgina inicial
Delete this message
Reply to this message
Autor: Yves Goergen
Data:  
A: exim
Assumpte: Re: [exim] Don't split syslog lines
On 26.09.2010 22:25 CE(S)T, Yves Goergen wrote:
> Is there any chance that there will be an option to do just that and
> keep messages as one when writing to the syslog?


Or maybe another question: How am I supposed to ever recombine those
split-up log lines to a single record? A single line is worth nothing. A
key that would tie all lines of a record together does not exist. The
only thing that I have is the common timestamp (at 1 s resolution) and
the short serial number that is prepended to each line. That doesn't
sound very unambiguous yet.

If there was a key or something I could create a database trigger to
recombine the lines as soon as the last one comes in, or to do that
off-line or near-realtime in a separate process. But I don't even have
enough data to do that reliably. And as you know, row [insertion] order
doesn't matter in an RDBMS.

Of course the best solution would be to not break up the record in the
first place. I guess this is just some additional code in Exim that
simply needs to be deactivated.

--
Yves Goergen "LonelyPixel" <nospam.list@???>
Visit my web laboratory at http://beta.unclassified.de