Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Date: Mon, 10 Jun 2002 10:24:12 +0100
From: Tony Arnold <tony DOT arnold AT man DOT ac DOT uk>
X-X-Sender: zzalsaca AT aca-vnt DOT mcc DOT ac DOT uk
To: Bjoern Kahl AG Resy <kahl AT informatik DOT uni-kl DOT de>
cc: cygwin AT cygwin DOT com
Subject: Re: Syslog (was: <no subject>)
In-Reply-To: <Pine.GSO.4.44.0206101036430.1707-100000@domino.informatik.uni-kl.de>
Message-ID: <Pine.CYG.4.44.0206101017180.1968-100000@aca-vnt.mcc.ac.uk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Scanner: exiscan *17HLMs-000Fa0-00*0.77cRqtOKo* (Manchester Computing, University of Manchester)

Dear All,

On Mon, 10 Jun 2002, Bjoern Kahl AG Resy wrote:

> On Mon, 10 Jun 2002, Thomas Mellman wrote:
>
> > I can't find any reference to syslogd for CYGWIN, although there
> > is a syslog(1).
> > Isn't this daemon necessary to write a /var/log/messages file?
>
>  AFAIK all syslog-messages are send to the NT-syslog-service. I
>  dont know how it is named in the english version of NT, but in
>  the german NT it is named "Ereignisanzeige", so probably "event-viewer"
>  or some thing like that in the english versions of NT.

I recall a question posted by Chris Faylor some time ago asking if the
community wanted continued support for syslogd in Cygwin. As there was no
demand for it at the time, the support was dropped.

Having thought about it since, I can see some good reasons for having it:

	1) Being able to grep a log file and otherwise process it with
UNIX like tools would be a great advantage. I don't know of anyway to look
at the NT event log using non Windoze tools (and if you could, the
messages are not that friendly).

	2) The ability to send logging to a central syslog server as you
can on UNIX systems would also be useful. We currently centralise our
logging and we than analyse the log to detect attempted intrusion
patterns. extending this to Windows boxes would be very useful.

Just my 2 pen'orth.

Regards,
Tony.
-- 
Tony Arnold, Deputy to the Head of COS Division, Manchester Computing,
University of Manchester, Oxford Road, Manchester M13 9PL.
T: +44 (0)161 275 6093, F: +44 (0)870 136 1004, M: +44 (0)773 330 0039
E-mail: tony DOT arnold AT man DOT ac DOT uk, Home: http://www.man.ac.uk/Tony.Arnold


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/