in reply to Re: adaptive syslog message parsing
in thread adaptive syslog message parsing

we actually do use syslog-ng on most hosts, all those entries were the result of syslog-ng logging..

the main goal is having a centralized place to look at it for all messages, informative and otherwise, and a way to cut down on the false positives.. by performing this "smart-regex" with summarization/generalization, hopefully it will give a singular viewpoint for how to respond to the ones that are found to actually need response (how severe an error is however can't be calculated by any program, and needs sysadmin intervention).. the last part is what my script aims to solve