Re: Preliminary log matching support (the third)

[SorinS]

How about the Henry Spencer regexp lib?

http://arglist.com/regex/

Congrats - great work! It is very useful for me at least...

Sorin


On Wed, 3 Aug 2005 16:50:21 +0200 (CEST)
Christian Hopp <address@hidden> wrote:

> Hi!
> 
> So that's my third and hopefully final version of my log matching support 
> for file checks.  In addition to the older versions it addresses:
> 
> - a "real life" example in the docs
> - bug fixes
> 
> Furthermore I did some stress testing for it.  I took the logcheck regex 
> database (server) shipped with Debian Linux (>800 lines of regexs) and 
> loaded it with the "IF MATCH path" and "IGNORE MATCH path" statement. 
> Afterwards I gave monit pieces of 40-400 lines of my syslog output to 
> chew.  Where 40 lines are hardly noticable (<1s), 400 lines give already 
> some stress (~6s) (Pentium-M 1.7GHz).  But it worked. (:
> 
> Remaining issues:
> 
> - tuning of the event output... multi line output and logfiles do not go
>    along nicely!
> - external regex lib
> 
> Christian
> 
> -- 
> Christian Hopp                                email: address@hidden
> Institut für Elektrische Informationstechnik             fon: +49-5323-72-2113
> TU Clausthal, Leibnizstr. 28, 38678 Clausthal-Zellerf.   fax: +49-5323-72-3197
>                               pgpkey: 
> https://www.iei.tu-clausthal.de/pgp-keys/