<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<tt>Hi Ben,<br>
<br>
<tt>And <tt>how <tt>do you <tt>capture <tt>and<tt> deliver the
logs to this ve<tt>ndor<tt>? <tt>still via syslog ?
or via stderr?<br>
<br>
<tt>Regards,</tt><br>
</tt></tt></tt></tt></tt></tt></tt></tt></tt></tt>
<pre class="moz-signature" cols="72">Bogdan-Andrei Iancu
OpenSIPS Founder and Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a>
OpenSIPS Summit 2018
<a class="moz-txt-link-freetext" href="http://www.opensips.org/events/Summit-2018Amsterdam">http://www.opensips.org/events/Summit-2018Amsterdam</a>
</pre>
<div class="moz-cite-prefix">On 04/13/2018 04:47 PM, Ben Newlin
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:C5A5A61B-9A26-4385-B7D1-652E38E5BA35@genesys.com">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Apple Color Emoji";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{mso-style-priority:99;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Bogdan,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I can
understand the desire for consistency.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Unfortunately
in our case we are using an external log service vendor and
the application that is collecting the logs is provided by
them. It simply collects all logs and does not have any
option to preprocess individual log entries. We don’t have
the ability to pre-process the logs prior to ingestion. We
can, I think, filter out the extra info while searching the
logs, but it will make the searches more complex and slower.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">It would be
nice to be able to disable this so there is some option to
only log what is provided without manipulation. It could be
a flag that affects xlog, or a different log function that
doesn’t use the prefix. If you think it is worthy, I’d be
happy to open a feature request.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span
style="font-size:11.0pt;color:black">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:11.0pt;color:black">Ben Newlin</span><span
style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span
style="color:black">Bogdan-Andrei Iancu
<a class="moz-txt-link-rfc2396E" href="mailto:bogdan@opensips.org"><bogdan@opensips.org></a><br>
<b>Date: </b>Thursday, April 12, 2018 at 4:02 PM<br>
<b>To: </b>OpenSIPS users mailling list
<a class="moz-txt-link-rfc2396E" href="mailto:users@lists.opensips.org"><users@lists.opensips.org></a>, Ben Newlin
<a class="moz-txt-link-rfc2396E" href="mailto:Ben.Newlin@genesys.com"><Ben.Newlin@genesys.com></a><br>
<b>Subject: </b>Re: [OpenSIPS-Users] xlog adding
information to output<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><a name="_MailOriginalBody"
moz-do-not-send="true"><tt><span style="font-size:10.0pt">Hi
Ben,</span></tt></a><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:10.0pt;font-family:"Courier
New""><br>
<br>
<tt>Yes, this change was done on purpose for logs
consistency reasons. As when you log via syslog you will
get *all* the time the process name, pid and data as
suffix, we considered that printing to strerr should
follow the same model and have *all* the time the same
prefix for the messages.</tt><br>
<br>
<tt>Now, I guess you grep the logs by some sort of an
application (before having them pushed as jsons for
later processing) - maybe you can do some extra
pre-processing the strip the prefix before parsing it as
json.</tt><br>
<br>
<tt>Regards,</tt><br>
<br>
</span></span><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></p>
<pre><span style="mso-bookmark:_MailOriginalBody">Bogdan-Andrei Iancu<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"><o:p> </o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">OpenSIPS Founder and Developer<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"> </span><a href="http://www.opensips-solutions.com" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://www.opensips-solutions.com</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">OpenSIPS Summit 2018<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"> </span><a href="http://www.opensips.org/events/Summit-2018Amsterdam" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://www.opensips.org/events/Summit-2018Amsterdam</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
<div>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody">On 04/06/2018 10:58
PM, Ben Newlin wrote:<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">Hi,</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">Yet another question.
</span></span><span style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt;font-family:"Apple Color
Emoji",serif">☺</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">We use the json module to
structure our output to and then print using xlog. Our
log consumer processes the json format and can process
and index our logs.</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">It appears that in 2.x the xlog
module now always prepends a date string and the process
number before every log. This is causing the logs to not
be valid json format and they are not parsed properly by
our consumer.</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">I know that OpenSIPS’ internal
logs always print in this format with the date and
process number in front. Was this an intentional change
to make xlog print this way as well? Can it be disabled
in any way?</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt">I’m pretty sure I remember
someone else asking about this not too long ago but I
couldn’t find the thread in the archive.</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"> </span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt;color:black">Thanks,</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt;color:black">Ben Newlin</span><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"><br>
<br>
<br>
<o:p></o:p></span></span></p>
<pre><span style="mso-bookmark:_MailOriginalBody">_______________________________________________<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody">Users mailing list<o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="mailto:Users@lists.opensips.org" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">Users@lists.opensips.org</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
<pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
</blockquote>
<p class="MsoNormal"><span
style="mso-bookmark:_MailOriginalBody"><span
style="font-size:11.0pt"><br>
<br>
</span></span><span style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
</blockquote>
<br>
</body>
</html>