adarqui / logfs-c-prototype Goto Github PK

built to capture everything send to 'logserv' via zmq. Needs an 'upstream' zmq connections which it writes to.

example usage:
-------------'

	mkdir -p /tmp/logs
	./logserv /tmp/logs/
	UPSTREAM="tcp://127.0.0.1:1010" PREFIX="localhost" ./logfs -o intr -o nonempty -o allow_other /var/log
	pkill -HUP -f syslog


testing logserv:
---------------'

./test-logserv


building:
--------'

make


running "in production":
-----------------------'

UPSTREAM=tcp://localhost:1010 ./logfs -o allow_other -o nonempty -o auto_unmount -o intr /tmp/logfs


environment variables:
---------------------'

UPSTREAM=

	specifies the 'upstream zmq connection' which logs are sent to

	example: UPSTREAM="tcp://IP_OF_LOGSERV:1010"

PREFIX=

	specifies the prefix to use for each log message. This can be a host identifier etc.

	example: PREFIX="local-web"



concept:
-------'

	creates a mapping in which you can intercept everything written to /var/log (or some other directory you specify). None of the writes will persist to disk. Instead, they will quickly pass to an upstream zmq connection. If 'logserv' goes down, 1000 messages will be queued up. After 1000 are reached, messages are dropped. Once the zmq connection is re-established, all queue'd messages will be sent to logserv.