[logs] Is "last message repeated n times" anything good?

Andreux Fort (あんどりゅー) afort at choqolat.org
Tue Mar 18 09:38:15 PDT 2008


On Tue, Mar 18, 2008 at 3:11 AM, Rainer Gerhards
<rgerhards at hq.adiscon.com> wrote:

>  Before I drop the feature, I'd like to receive as broad feedback as
>  possible from potential users.
>  Does anybody actually need this feature? If so, why is it good?
>
>  Please provide feedback.
>
>  Thanks,
>  Rainer

Personally, I've never wanted this "last message" behavior from my
syslogd's, since it means an additional step in post-processing, disk
is cheap(ish), my post-processing finds spammy sources anyhow, and
importantly; it collapses the time-domain for those events, something
I dislike.

-- 
Andreux Fort (afort at choqolat.org)


More information about the LogAnalysis mailing list