[logs] regexless parsing, again?

Marcus J. Ranum mjr at ranum.com
Thu Sep 13 15:55:23 PDT 2007


Anton Chuvakin wrote:
>- wait until all logs are in a common XML schema (we know how this one
>ends: MJR emerges out of the darkest part of the woods and kicks
>everybody's ass :-))


PS - how did you KNOW this? Do you have spyware on my
SPARCstation?

;)

Just a teaser:
- Yes, it will use a pseudo-XML like intermediate form. close enough
        to XML to annoy those of us who hate XML but incompatible
        enough with XML to annoy the XML nazis.
- It will be embeddable as a re-entrant library and should plug into
        pretty much anything.
- It will not be syslog-specific.

mjr.


More information about the LogAnalysis mailing list