[Speakers] Re: Centralized Logging

[Adam Tauno Williams]

> > > Just curious, but what's the advantage(s) of logging to a database over
> > > standard syslogd text files?  i.e. Why did you do this?
> > Easier to manage and search mostly.  
> Yeah, I thought of the search thing.  I thought maybe there were fancy
> reporting packages that required a DB, or some other reason.

There might be.  I certainly could use the database from Open Reports,
but I haven't gotten that ambitious with it yet.

> > Another instance is the occasional user call whining about how they sent
> > some e-mail message and the other end claims they never got it.
> Gee, never seen that before!  ;-)

Ah, so these things really on happen to me.  How depressing.

> > [BTW, the message *ALWAYS* goes through just fine,  but users are
> > frequently convinced that the system 'lost it'.
> Yup, amazing how that works.
> > My favorite was the
> > furious arm waving user who had set their SIEVE filter to delete ALL
> > incoming mail.
> Wow ...  :-)

It was quite shocking at the time;  and the torrent of profanity when I
showed him what he had done....  but it was *STILL* the systems fault,
it should stop him from making mistakes..... still waiting for an
upgrade that does that.

> > But you really want to index that table as it appears we generate
> > 250,000+ log messages a day.  So if I keep data for 30 days that will be
> > ~7.5 million records.  Wow.
> How often do you vacuum/reindex/whatever the tables?

I put it in my daily vaccum script -

cassowary:/etc/cron.daily # cat vacuum
#!/bin/sh
/usr/bin/psql -U syslog syslog -c "VACUUM ANALYZE VERBOSE" 2>&1 \
  | mail -s "Syslog Vacuum" shared
+departments.cis.status.cassowary at sardine
/usr/bin/psql -U opennms opennms -c "VACUUM ANALYZE VERBOSE" 2>&1 \
  | mail -s "OpenNMS Vacuum" shared
+departments.cis.status.cassowary at sardine

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.kalamazoolinux.org/pipermail/speakers/attachments/20060214/81667b27/attachment.bin