6.2. Architecture of a Logging System
This section describes the architecture and properties of an "ideal" logging system. The next section describes syslog and compares it to the ideal presented below.
A logging system can be divided into three major sections: one to collect log messages, one to route them, and one to deliver them (or to start other actions). Figure 6-1 illustrates the architecture of a logging system.
Let's consider each of these three sections in more detail.
6.2.1. Message Sources
The ideal logging system is a clearing house for messages from anywhere on the appliance, and it should be able to accept messages from many sources, including Unix sockets, UDP and TCP sockets, named pipes, and from following a file (the output of ...
Get Linux Appliance Design now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
