summaryrefslogtreecommitdiffstats
path: root/plugins/imjournal
Commit message (Collapse)AuthorAgeFilesLines
* imjournal: rate limiter was destructed too earlyRainer Gerhards2013-06-171-1/+1
| | | | | Too quick hacking, obviously, one too late, one too early, now it should fit ;) Thanks to Tomas Heinrich for pointing this out.
* imjournal fix: put ratelimiter destruction in wrong entry pointRainer Gerhards2013-06-171-1/+1
| | | | No regression, this was in recently written, never-released code.
* implement new ratelimiting mode for imjournalRainer Gerhards2013-06-171-0/+3
| | | | | | | | | | | | | and make imjournal use it. The new mode is needed, as imjournal uses journal's timestamp as message generation time (which otherwise is when the message entered the system, and the ratelimiter uses this as current timestamp in order to save performance). It is debatable if imjournal is doing the right thing here. But it doesn't feel totally wrong. So let's safe that debate for later ;)
* Add IgnorePreviousMessages option to imjournal.Milan Bartos2013-06-171-5/+31
| | | | | | | | | | | | | This option specifies whether imjournal should ignore messages that are currently in journal. This option is only used when there is no StateFile to avoid message loss. modified: doc/imjournal.html modified: plugins/imjournal/imjournal.c Conflicts: doc/imjournal.html plugins/imjournal/imjournal.c
* Merge branch 'tmp' into v7-stableRainer Gerhards2013-06-171-3/+3
|\ | | | | | | | | Conflicts: plugins/imjournal/imjournal.c
| * Rename legacy imjournal configs to have "imjournal" prepended.Milan Bartos2013-06-171-3/+3
| | | | | | | | | | modified: doc/imjournal.html modified: plugins/imjournal/imjournal.c
* | imjournal: add legacy config statement for ratelimitingRainer Gerhards2013-06-151-0/+4
| |
* | imjournal: add ratelimiting capabilityRainer Gerhards2013-06-151-8/+23
| | | | | | | | | | | | | | | | | | | | | | The original imjournal code did not support ratelimiting at all. We now have our own ratelimiter. This can mitigate against journal database corruption, when the journal re-sends old data. This is a current bug in systemd journal, but we won't outrule this to happen in the future again. So it is better to have a safeguard in place. By default, we permit 20,000 messages witin 10 minutes. This may be a bit restrictive, but given the risk potential it seems reasonable. Users requiring larger traffic flows can always adjust the value.
* | bugfix: prevent a segfault if state file is not definedTomas Heinrich2013-06-141-12/+31
| |
* | bugfix: be more tolerant to malformed journal fieldsTomas Heinrich2013-06-101-1/+8
|/ | | | | | This prevents a segfault when a malformed journal entry field doesn't contain an equal sign. Should not ever happen but was actually triggered by a real bug in systemd journal.
* bugfix: imjournal should respect termination requestTomas Heinrich2013-05-261-11/+67
| | | | | sd_journal_wait() ignores EINTR and this behavior interferes with module's termination signaling. Therefore, poll() is used instead.
* bugfix: imjournal's thread shouldn't be canceledTomas Heinrich2013-05-261-2/+8
| | | | | Because of cancelation, the correct possition in the journal was lost. This resulted in duplicate messages appearing in the logs.
* Eliminate sleep in imjournal code with sd_journal_waitMilan Bartos2013-05-221-5/+6
| | | | modified: plugins/imjournal/imjournal.c
* Clean up warnings in imjournal and omjournalTomas Heinrich2013-05-201-9/+12
|
* Imjournal state files can be stored in WorkDirectoryMilan2013-05-201-2/+14
| | | | | | When the imjournal state file path doesn't start with '/', then it's by default stored in WorkDirectory. When path starts with '/', full path is used.
* Add missing pid part of syslog tag.Milan Bartos2013-05-141-3/+24
|
* Fix a condition in imjournalTomas Heinrich2013-05-141-1/+10
| | | | | This prevented state file from being written with newer systemd. Add some more debug information.
* imjournal: very slight optimizationRainer Gerhards2013-04-171-6/+6
| | | | | ... well, it's actually questionable if it is a real optimization or not ;)
* Fix journal trusted fields translation.Milan Bartos2013-04-171-8/+32
| | | | modified: plugins/imjournal/imjournal.c
* Add support for persistenting journal stateMilan Bartos2013-04-171-6/+132
| | | | modified: plugins/imjournal/imjournal.c
* Improved field translate performance.Milan Bartos2013-03-191-15/+33
| | | | modified: imjournal.c
* imjournal: streamline build system a bitRainer Gerhards2013-03-121-4/+3
| | | | | ... most importantly the configure switch is no longer --enable-journal but --enable-imjournal (as we now also have omjournal!)
* Added internal log info when message from journal doesn't have MESSAGEMilan Bartos2013-03-051-1/+2
| | | | modified: plugins/imjournal/imjournal.c
* Ignore systemd journal internal messages (without facility)Milan Bartos2013-03-051-2/+3
| | | | modified: plugins/imjournal/imjournal.c
* Add all fields from journal message (including non standard).Milan Bartos2013-03-051-72/+54
| | | | modified: plugins/imjournal/imjournal.c
* Add imjournal module for reading messages from systemd journal.Milan Bartos2013-03-053-0/+427
For reading messages with all fields from structured systemd journal log messages. Loading module with $ModLoad imjournal is enough to start pulling messages no other configuration is needed. modified: Makefile.am modified: configure.ac new file: plugins/imjournal/Makefile.am new file: plugins/imjournal/imjournal.c new file: plugins/imjournal/imjournal.h