From: Evan Rempel <erempel@uvic.ca>
To: pgsql-admin@postgresql.org
Subject: Re: 9.5 new setting "cluster name" and logging
Date: Thu, 18 Feb 2016 14:05:11 -0800
Message-ID: <56C64017.7050303@uvic.ca> (raw)
In-Reply-To: <27145.1455832381@sss.pgh.pa.us>
References: <1377186808.57546.YahooMailNeo@web193505.mail.sg3.yahoo.com>
<A737B7A37273E048B164557ADEF4A58B17C08086@ntex2010a.host.magwien.gv.at>
<1377494614.9111.YahooMailNeo@web193506.mail.sg3.yahoo.com>
<A737B7A37273E048B164557ADEF4A58B17C0876C@ntex2010a.host.magwien.gv.at>
<56AC5601.5040208@uvic.ca>
<20160218214202.GA30326@momjian.us>
<27145.1455832381@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
On 02/18/2016 01:53 PM, Tom Lane wrote:
> Bruce Momjian <bruce@momjian.us> writes:
>> On Fri, Jan 29, 2016 at 10:19:45PM -0800, Evan Rempel wrote:
>>> Now that there is a setting to give a cluster a "name", it would be
>>> nice to have an escape sequence in the log_line_prefix setting that
>>> could reference the cluster_name.
>> Uh, wouldn't the cluster name be the same on every line? Is that
>> useful?
> I guess if you were running multiple clusters and having them all log
> to the same syslog daemon, there might be multiple clusters' output
> in the same log ... but we already have ways to disambiguate that case,
> ie, syslog_ident. Likewise for Windows' event log. I don't think we
> should consider it supported for multiple clusters to be logging into
> the same plain files. So yeah, the use case for this seems unclear.
>
> regards, tom lane
The use case is for logging to syslog.
Using the syslog_ident effectively changes the "program name" to something other than postgres. This would break any type of SIEM system that would be looking for events from the program postgres. This means that if you want to have a cluster specific contextual identifier, it needs to be in the log message content, which for the purposes of postgresql means placing it into the log_line_prefix.
It could be hard coded as part of the log_line_prefix such as
log_line_prefix = 'cluster-db1:%d:%u:%h '
That would work, but that means that my cluster name needs to be in the configuration file twice and that opens up the error scenario of not making them exactly the same.
Allowing for the cluster_name to be referenced by an escape sequence would make manual and automated configuration management easier.
Thanks for listening.
--
Evan Rempel
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: erempel@uvic.ca
Subject: Re: 9.5 new setting "cluster name" and logging
In-Reply-To: <56C64017.7050303@uvic.ca>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox