#25 Waldo file functionality for generic sensor agent

open
nobody
None
5
2008-10-31
2008-10-31
Jimbo
No

This is a suggestion to add functionality to recover from a system crash or the crash of the generic sguil agent.

Lets say the generic agent is reading a syslog file and crashes. When you start the agent back up, it will re-read events it has already seen, inputting them to the database and presenting them as new events. I think if there was something similar to barnyard's waldo file, the agent could resume where it left off prior to the crash.

Jim

Discussion

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks