[logs] anyone willing to share proper syslog SQL schema & data typing?

Marcus J. Ranum mjr at ranum.com
Sun Jul 29 17:40:18 PDT 2007


Jason Haar wrote:
>our current file-based structure is really quite slow - so SQL sounds like the way
>to go.

Is it slow for inserts, or just slow for searching? Because if inserts
are currently a problem, using SQL is going to make things worse
rather than better. Obviously, a database will make searching a lot
faster depending on what fields you set up as indexed.

mjr. 


More information about the LogAnalysis mailing list