[logs] regexless parsing, again?
Marcus J. Ranum
mjr at ranum.com
Thu Sep 13 15:55:23 PDT 2007
Anton Chuvakin wrote:
>- wait until all logs are in a common XML schema (we know how this one
>ends: MJR emerges out of the darkest part of the woods and kicks
>everybody's ass :-))
PS - how did you KNOW this? Do you have spyware on my
SPARCstation?
;)
Just a teaser:
- Yes, it will use a pseudo-XML like intermediate form. close enough
to XML to annoy those of us who hate XML but incompatible
enough with XML to annoy the XML nazis.
- It will be embeddable as a re-entrant library and should plug into
pretty much anything.
- It will not be syslog-specific.
mjr.
More information about the LogAnalysis
mailing list