[logs] Is "last message repeated n times" anything good?
Andreux Fort (あんどりゅー)
afort at choqolat.org
Tue Mar 18 09:38:15 PDT 2008
On Tue, Mar 18, 2008 at 3:11 AM, Rainer Gerhards
<rgerhards at hq.adiscon.com> wrote:
> Before I drop the feature, I'd like to receive as broad feedback as
> possible from potential users.
> Does anybody actually need this feature? If so, why is it good?
>
> Please provide feedback.
>
> Thanks,
> Rainer
Personally, I've never wanted this "last message" behavior from my
syslogd's, since it means an additional step in post-processing, disk
is cheap(ish), my post-processing finds spammy sources anyhow, and
importantly; it collapses the time-domain for those events, something
I dislike.
--
Andreux Fort (afort at choqolat.org)
More information about the LogAnalysis
mailing list