Dynamic log import
EELS can automatically import records from proprietary
log files when those log files grow by a given amount.
The configuration information for dynamic log import is contained in
a dynamic-import parameter block. Multiple dynamic-import
blocks are allowed within a single configuration file. The parameter
block contains the following tags:
The EELS daemon
(eelsd(1Meels))
monitors the log file filename. When the file's increase
in size equals growth, eelsd executes the
script called filename to import the records from the
log file.
The script must import the records in a format that
EELS can use. For information on how to
create such a script, see
``Importing external log files''.
One feature that is not addressed by the dynamic-import
parameter block is that of how to keep track of what has already
been imported. It is the responsibility of the import script to keep
track of what has already been imported from a particular script. There
are several methods you can use to do this:
-
after importing the records from the log file,
rotate the name, for example, from log_file.err to
log_file.err.001
-
keep a running total of the size of the log file at the
moment it is imported, so that the next time you import
the file, you know how many bytes or records to skip
-
delete the contents of the log file; if you are confident
about this, empty the log file after you have imported it
into the EELS database
The method you use will depend on several things, such as
the application that is doing the logging, the frequency
of logging to the file, the security model your system
employs, and so on.
For more information, see
``Customizing dynamic log importing''.
© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004