<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <tt><tt>Hi <tt>Ben,<br>
          <br>
          <tt>And ther<tt>e is no way to <tt>insert something <tt>between
                  opensips and the <tt>c</tt><tt><tt>ollector</tt> in
                    orde<tt>r</tt></tt></tt></tt></tt></tt> to<tt> do
            some tex<tt>t processing. I mean, <tt>how <tt>does the <tt>vendor'<tt>s
                      collector <tt>attaches to the st<tt>derr<tt>or ?
                            You start opensips within other app ? or ?</tt></tt></tt></tt></tt></tt></tt></tt></tt><br>
        </tt></tt><br>
      Best regards,</tt><br>
    <pre class="moz-signature" cols="72">Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  <a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a>
OpenSIPS Summit 2018
  <a class="moz-txt-link-freetext" href="http://www.opensips.org/events/Summit-2018Amsterdam">http://www.opensips.org/events/Summit-2018Amsterdam</a>
</pre>
    <div class="moz-cite-prefix">On 04/18/2018 03:30 PM, Ben Newlin
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:419E549D-B421-4C80-ABA4-3113FC9BD1AD@genesys.com">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <meta name="Generator" content="Microsoft Word 15 (filtered
        medium)">
      <style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:"Apple Color Emoji";
        panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New",serif;}
tt
        {mso-style-priority:99;
        font-family:"Courier New",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:Consolas;}
span.EmailStyle21
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
span.EmailStyle22
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
span.EmailStyle23
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style>
      <div class="WordSection1">
        <p class="MsoNormal"><span style="font-size:11.0pt">Bogdan,<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt">We collect
            the logs via stdout/stderr.<o:p></o:p></span></p>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <div>
          <p class="MsoNormal"><span
              style="font-size:11.0pt;color:black">Thanks,<o:p></o:p></span></p>
          <p class="MsoNormal"><span
              style="font-size:11.0pt;color:black">Ben Newlin</span><span
              style="font-size:11.0pt"><o:p></o:p></span></p>
        </div>
        <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        <div style="border:none;border-top:solid #B5C4DF
          1.0pt;padding:3.0pt 0in 0in 0in">
          <p class="MsoNormal"><b><span style="color:black">From: </span></b><span
              style="color:black">Bogdan-Andrei Iancu
              <a class="moz-txt-link-rfc2396E" href="mailto:bogdan@opensips.org"><bogdan@opensips.org></a><br>
              <b>Date: </b>Wednesday, April 18, 2018 at 5:37 AM<br>
              <b>To: </b>Ben Newlin <a class="moz-txt-link-rfc2396E" href="mailto:Ben.Newlin@genesys.com"><Ben.Newlin@genesys.com></a>,
              OpenSIPS users mailling list
              <a class="moz-txt-link-rfc2396E" href="mailto:users@lists.opensips.org"><users@lists.opensips.org></a><br>
              <b>Subject: </b>Re: [OpenSIPS-Users] xlog adding
              information to output<o:p></o:p></span></p>
        </div>
        <div>
          <p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
        </div>
        <p class="MsoNormal"><tt><span style="font-size:10.0pt">Hi Ben,</span></tt><span
            style="font-size:10.0pt;font-family:"Courier
            New",serif"><br>
            <br>
            <tt>And how do you capture and deliver the logs to this
              vendor? still via syslog ? or via stderr?</tt><br>
            <br>
            <tt>Regards,</tt><br>
            <br>
          </span><o:p></o:p></p>
        <pre>Bogdan-Andrei Iancu<o:p></o:p></pre>
        <pre><o:p> </o:p></pre>
        <pre>OpenSIPS Founder and Developer<o:p></o:p></pre>
        <pre>  <a href="http://www.opensips-solutions.com" moz-do-not-send="true">http://www.opensips-solutions.com</a><o:p></o:p></pre>
        <pre>OpenSIPS Summit 2018<o:p></o:p></pre>
        <pre>  <a href="http://www.opensips.org/events/Summit-2018Amsterdam" moz-do-not-send="true">http://www.opensips.org/events/Summit-2018Amsterdam</a><o:p></o:p></pre>
        <div>
          <p class="MsoNormal">On 04/13/2018 04:47 PM, Ben Newlin wrote:<o:p></o:p></p>
        </div>
        <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
          <p class="MsoNormal"><span style="font-size:11.0pt">Bogdan,</span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt">I can
              understand the desire for consistency.</span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt">Unfortunately
              in our case we are using an external log service vendor
              and the application that is collecting the logs is
              provided by them. It simply collects all logs and does not
              have any option to preprocess individual log entries. We
              don’t have the ability to pre-process the logs prior to
              ingestion. We can, I think, filter out the extra info
              while searching the logs, but it will make the searches
              more complex and slower.</span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt">It would
              be nice to be able to disable this so there is some option
              to only log what is provided without manipulation. It
              could be a flag that affects xlog, or a different log
              function that doesn’t use the prefix. If you think it is
              worthy, I’d be happy to open a feature request.</span><o:p></o:p></p>
          <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          <div>
            <p class="MsoNormal"><span
                style="font-size:11.0pt;color:black">Thanks,</span><o:p></o:p></p>
            <p class="MsoNormal"><span
                style="font-size:11.0pt;color:black">Ben Newlin</span><o:p></o:p></p>
          </div>
          <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          <div style="border:none;border-top:solid #B5C4DF
            1.0pt;padding:3.0pt 0in 0in 0in">
            <p class="MsoNormal"><b><span style="color:black">From: </span></b><span
                style="color:black">Bogdan-Andrei Iancu
                <a href="mailto:bogdan@opensips.org"
                  moz-do-not-send="true"><bogdan@opensips.org></a><br>
                <b>Date: </b>Thursday, April 12, 2018 at 4:02 PM<br>
                <b>To: </b>OpenSIPS users mailling list <a
                  href="mailto:users@lists.opensips.org"
                  moz-do-not-send="true">
                  <users@lists.opensips.org></a>, Ben Newlin <a
                  href="mailto:Ben.Newlin@genesys.com"
                  moz-do-not-send="true">
                  <Ben.Newlin@genesys.com></a><br>
                <b>Subject: </b>Re: [OpenSIPS-Users] xlog adding
                information to output</span><o:p></o:p></p>
          </div>
          <div>
            <p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
          </div>
          <p class="MsoNormal"><a name="_MailOriginalBody"
              moz-do-not-send="true"><tt><span style="font-size:10.0pt">Hi
                  Ben,</span></tt></a><span
              style="mso-bookmark:_MailOriginalBody"><span
                style="font-size:10.0pt;font-family:"Courier
                New",serif"><br>
                <br>
                <tt>Yes, this change was done on purpose for logs
                  consistency reasons. As when you log via syslog you
                  will get *all* the time the process name, pid and data
                  as suffix, we considered that printing to strerr
                  should follow the same model and have *all* the time
                  the same prefix for the messages.</tt><br>
                <br>
                <tt>Now, I guess you grep the logs by some sort of an
                  application (before having them pushed as jsons for
                  later processing) - maybe you can do some extra
                  pre-processing the strip the prefix before parsing it
                  as json.</tt><br>
                <br>
                <tt>Regards,</tt><br>
                <br>
                <br>
              </span><o:p></o:p></span></p>
          <pre><span style="mso-bookmark:_MailOriginalBody">Bogdan-Andrei Iancu<o:p></o:p></span></pre>
          <pre><span style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></pre>
          <pre><span style="mso-bookmark:_MailOriginalBody">OpenSIPS Founder and Developer<o:p></o:p></span></pre>
          <pre><span style="mso-bookmark:_MailOriginalBody">  </span><a href="http://www.opensips-solutions.com" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://www.opensips-solutions.com</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
          <pre><span style="mso-bookmark:_MailOriginalBody">OpenSIPS Summit 2018<o:p></o:p></span></pre>
          <pre><span style="mso-bookmark:_MailOriginalBody">  </span><a href="http://www.opensips.org/events/Summit-2018Amsterdam" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://www.opensips.org/events/Summit-2018Amsterdam</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
          <div>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody">On 04/06/2018
                10:58 PM, Ben Newlin wrote:<o:p></o:p></span></p>
          </div>
          <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">Hi,</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">Yet another question.
                </span></span><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt;font-family:"Apple Color
                  Emoji",serif">☺</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">We use the json module to
                  structure our output to and then print using xlog. Our
                  log consumer processes the json format and can process
                  and index our logs.</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">It appears that in 2.x the
                  xlog module now always prepends a date string and the
                  process number before every log. This is causing the
                  logs to not be valid json format and they are not
                  parsed properly by our consumer.</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">I know that OpenSIPS’
                  internal logs always print in this format with the
                  date and process number in front. Was this an
                  intentional change to make xlog print this way as
                  well? Can it be disabled in any way?</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt">I’m pretty sure I remember
                  someone else asking about this not too long ago but I
                  couldn’t find the thread in the archive.</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"> </span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt;color:black">Thanks,</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt;color:black">Ben Newlin</span><o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"> <o:p></o:p></span></p>
            <p class="MsoNormal"><span
                style="mso-bookmark:_MailOriginalBody"><span
                  style="font-size:11.0pt"><br>
                  <br>
                  <br>
                  <br>
                </span><o:p></o:p></span></p>
            <pre><span style="mso-bookmark:_MailOriginalBody">_______________________________________________<o:p></o:p></span></pre>
            <pre><span style="mso-bookmark:_MailOriginalBody">Users mailing list<o:p></o:p></span></pre>
            <pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="mailto:Users@lists.opensips.org" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">Users@lists.opensips.org</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
            <pre><span style="mso-bookmark:_MailOriginalBody"></span><a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" moz-do-not-send="true"><span style="mso-bookmark:_MailOriginalBody">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</span><span style="mso-bookmark:_MailOriginalBody"></span></a><span style="mso-bookmark:_MailOriginalBody"><o:p></o:p></span></pre>
          </blockquote>
          <p class="MsoNormal"><span
              style="mso-bookmark:_MailOriginalBody"><span
                style="font-size:11.0pt"><br>
                <br>
                <br>
              </span><o:p></o:p></span></p>
        </blockquote>
        <p class="MsoNormal"><span
            style="mso-bookmark:_MailOriginalBody"><span
              style="font-size:11.0pt"><br>
              <br>
            </span></span><span style="font-size:11.0pt"><o:p></o:p></span></p>
      </div>
    </blockquote>
    <br>
  </body>
</html>