On Tue, 2010-08-24 at 22:52 +0100, Matthew Garrett wrote:
On Tue, Aug 24, 2010 at 05:43:49PM -0400, seth vidal wrote:
> that seems like a bit of odd logic. The logs are emitted to syslog with
> the same thought in mind - that someone will read them - but that is
> also not necessarily true. But I would not want to see us discarding
> syslog, either.
We have a range of utilities that perform useful syslog parsing. The
fact that most of them then seem to pass that output to sendmail leaves
me a little less convinced that anyone pays the slightest bit of
attention to them.
More realistically, we install syslog because it gives us debug
information that we (as developers) wouldn't otherwise be able to get.
Maybe that's why you do it - but I don't. And we have a lot of utilities
that parse and handle logs and send proper notifications on events we
need to worry about.
And the first person who mentions snmptrap events gets slapped. :)
-sv