I'm trying to aggregate several sources of error messages into one place, to easier put things into context. I'm currently looking at rsyslog, but I can change this - if it's preventing me from doing what I want to do.
My problem is, how can I best deal with the formatting of
An example entry from php5-fpm.log.slow would be:
Oct 16 17:16:39.820707 [pool www] pid 13060 script_filename = /var/www/somesite/index.php [0x0000000002f846c8] _path() /var/www/somesite/lib/Zend/Cache/Backend/File.php:895 [0x0000000002f844b0] _path() /var/www/somesite/lib/Zend/Cache/Backend/File.php:579 [0x0000000002f84210] _metadatasFile() /var/www/somesite/lib/Zend/Cache/Backend/File.php:545 [0x0000000002f83fb8] _loadMetadatas() /var/www/somesite/lib/Zend/Cache/Backend/File.php:479 [0x0000000002f830d0] _getMetadatas() /var/www/somesite/lib/Zend/Cache/Backend/File.php:750 [... Stack trace can be long, usually less than 30 lines ...]
And an example entry from mysql-slow.log would be:
# Time: 111017 7:20:17 # User@Host: someusername[someusername] @ [127.0.0.1] # Thread_id: 183761313 Schema: somesitedb Last_errno: 0 Killed: 0 # Query_time: 13.705725 Lock_time: 0.000146 Rows_sent: 0 Rows_examined: 8315267 Rows_affected: 0 Rows_read: 18446744073709551491 # Bytes_sent: 1019 Tmp_tables: 0 Tmp_disk_tables: 0 Tmp_table_sizes: 0 # InnoDB_trx_id: B4BB5B67 use somesitedb; SET timestamp=1318828817; SELECT * FROM table;
I want to send one syslog message for each of these entries - and keep the timestamp intact, so it's easier to contextualize what is going on. How may I best achieve this?