LogBlog

« Open Source Enterprise & Log Management | Main | National Data Security Laws Evolving »

Logging Glossary: Log Forwarder

As I mentioned here,  I started publishing the LogLogic Logging Glossary. So, here is the eigth term (first second third fourth fifth sixth seventh):

Log Forwarder

A tool or product component that monitors logs, or other data, on the originating system and delivers ("forwards") the logs to remote systems.

Forwarders are most often used with systems without a native remote logging capability, or does not support a desired remote logging protocol or format.

A forwarder is may reside on the originating system [Snare], or be another system dedicated to collecting and forwarding logs [Lasso]. A separate system forwarder does not aggregate or provide any form of log management.

Forwarders tend not to change the logs, other than to make them consumable by the remote system or by adding its own header. This may include multi-line to single-line conversion, or character conversion.

A forwarder may be simple or very configurable. It can include multiple protocols or formats, localization options, filtering, and delivery options. If a resource file is available, select equivalent messages for a different localization.

It may or may not monitor logs in real-time. It may be invoked on a schedule, after the logs are closed or, a transformation process or table dump has finished.

It is common for log management vendors to provide forwarders (sometimes called "log routing") or have the ability to forward messages. A provided forwarder may be general purpose or only work with the log management product, or both.

Posted June 11, 2007 in | Permalink


TrackBack

TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/209

Post a comment

Visit loglogic.com

I ♥ Logs

Subscribe to this blog’s feed RSS

June 2008
Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30          
Categories
Archives
Blogroll
Blogroll
Compliance
Good Reading
LogLogic
LogLogic Partners
Sites We Watch