(perl)script for cfengine analysis

[Thomas Glanzmann]

Has anybody written a perl script to analyze automatically cfengine runs? I have
to problem that I get 27 Mbyte(!) logs per day. If nobody comes up with
something useful I will rewrite my own in the near future :)

Greetings,
        Thomas
--
Thomas Glanzmann  ++49 (0) 9131 85-27574   Department of Computer Science III
Martensstrasse 3  D-91058 Erlangen Germany   University of Erlangen-Nuremberg
            http://www3.informatik.uni-erlangen.de/Research/UMLinux/
>From nate@campin.net Tue Dec 24 02:14:27 2002
Received: from list by monty-python.gnu.org with tmda-scanned (Exim 4.10.13)
        id 18QjGj-0000gg-00
        for help-cfengine@gnu.org; Tue, 24 Dec 2002 02:14:25 -0500
Received: from mail by monty-python.gnu.org with spam-scanned (Exim 4.10.13)
        id 18QjGV-0000Wp-00
        for help-cfengine@gnu.org; Tue, 24 Dec 2002 02:14:13 -0500
Received: from skitzo.campin.net ([209.209.45.48])
        by monty-python.gnu.org with esmtp (Exim 4.10.13)
        id 18QjGR-0000Tc-00
        for help-cfengine@gnu.org; Tue, 24 Dec 2002 02:14:07 -0500
Received: by skitzo.campin.net (Postfix, from userid 1000)
        id 90A891B059; Mon, 23 Dec 2002 23:14:06 -0800 (PST)
Date: Mon, 23 Dec 2002 23:14:06 -0800
From: Nate Campi <nate@campin.net>
To: Thomas Glanzmann <sithglan@stud.uni-erlangen.de>
Message-ID: <20021224071406.GA14758@campin.net>
References: <slrnb0fj8r.1kn.sithglan@faui00k.informatik.uni-erlangen.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <slrnb0fj8r.1kn.sithglan@faui00k.informatik.uni-erlangen.de>
User-Agent: Mutt/1.3.28i
X-Editor: VIM - Vi IMproved 6.1 (2002 Mar 24, compiled Apr 14 2002 20:39:56)
X-Anti-Outlook-Page: http://www.rodos.net/outlook/
X-PGP-Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC17AEF79
X-Url: http://www.campin.net
X-message-flag: Outlook: A program to spread viri, but it can do mail too.
cc: help-cfengine@gnu.org
Subject: Re: (perl)script for cfengine analysis
X-BeenThere: help-cfengine@gnu.org
X-Mailman-Version: 2.1b5
Precedence: list
List-Id: Users list for GNU cfengine  <help-cfengine.gnu.org>
List-Help: <mailto:help-cfengine-request@gnu.org?subject=help>
List-Post: <mailto:help-cfengine@gnu.org>
List-Subscribe: <http://mail.gnu.org/mailman/listinfo/help-cfengine>,
        <mailto:help-cfengine-request@gnu.org?subject=subscribe>
List-Archive: <http://mail.gnu.org/pipermail/help-cfengine>
List-Unsubscribe: <http://mail.gnu.org/mailman/listinfo/help-cfengine>,
        <mailto:help-cfengine-request@gnu.org?subject=unsubscribe>
X-List-Received-Date: Tue, 24 Dec 2002 07:14:28 -0000

On Tue, Dec 24, 2002 at 02:57:31AM +0000, Thomas Glanzmann wrote:
> Has anybody written a perl script to analyze automatically cfengine runs? I 
> have
> to problem that I get 27 Mbyte(!) logs per day. If nobody comes up with
> something useful I will rewrite my own in the near future :)

I simply turned "Syslog = (on)" and used my existing syslog parsing
tools to read the cfengine output on a central loghost. Once my cfengine
configuration(s) started to stabilize I didn't generate too much
cfengine log traffic.

Of course I risk losing logs this way, since syslog over UDP (or even
TCP if connectivity is delayed for more than a moment) is unreliable.
The compromise is worth it in my case, since I didn't need new tools, I
could extend my current ones as needed.
-- 
Nate Campi   http://www.campin.net 

Corporations are not evil. That kind of anthropomorphism is inappropriate.
Corporations are too stupid to be evil, only people can be that.  -jwz