Epylog 1.0.3 review

Epylog is a new log notifier and parser which runs periodically out of cron, looks at your logs, processes the entries in order to pr

License: GPL (GNU General Public License) File size: 115K Developer: Konstantin Ryabitsev

0

Epylog is a new log notifier and parser which runs periodically out of cron, looks at your logs, processes the entries in order to present them in a more comprehensive format, and then provides you with the output.

It is written specifically with large network clusters in mind where a lot of machines (around 50 and upwards) log to the same loghost using syslog or syslog-ng.

Alternatively, Epylog can be invoked from the command line and provide a log report based on a certain provided time period.

In this case it relies on syslog timestamps to find the offsets, as opposed to the end-of-log offsets stored during the last run, though this behavior is not as reliable and is easily thwarted by skewed clocks.

Here are some key features of "Epylog":
Threaded for faster network lookups
Unwraps "last message repeated" lines
Mails reports in either html or plain text (or both)
Publishes reports to a file with optional notification via email.
Accepts --last hour/2h/2d/2w command-line arguments
Handles modules written in both Python and other languages (though many "neat" features are not available to external modules)

Requirements:
Python-2.2 or above
libxml2-python.

What's New in This Release:
Preparing for the submission to Fedora Extras
Ignore "su" performed by crond to cut down on noise
Add a few extra ignore rules for newer OSes
Require python-abi instead of python. NOTE: This will not work on systems with python-2.2 (el3), so change the specfile to Require /usr/bin/python%(%{__python} -c....) or just use my packages.