Re: [STATUS 2.5] July 10, 2002

["Richard J Moore" <richardj_moore@uk.ibm.com>]

>> Are there any reasons why these don't make it into 2.5?
>>
>> >    - Better event logging for enterprise systems
>
> Linus was scared we could break old syslog parsers.

This is a surprising view given that what we currently have is broken.
Logging serves two purposes:
problem determination - via a human interface
system's management - via automation
It's the latter we need to be able to do reliably and can't because
currently:

   message uniqueness is not guaranteed
   message content is not complete for automation purposes
   some of the most serious error message have the least useful content
   many messages are issued using multiple printks and on an MP system can
   have their text interleaved
   there's no national language support
   embedded systems are not well catered for
   message recognition and parsing is haphazard

EVL is not seeking to do a wholesale replacement of printk. But does
provide the necessary infrastructure to achieve automation. Instrumentation
and re-instrumentation is an independent activity. It can be done in
incremental steps. But until we have a useful log management system service
we can't even begin to address the needs of system automation and systems'
management.

Again the OLS RAS BoF discussions were very focused on this issue and
supportive of it.  Instrumentation was the key subject of discussion - how
to do it with no administrative overhead, how to do it in a way that
developers would find acceptable, how to satisfy the needs for NLS and
embedded systems.

Richard J Moore IBM Linux Technology Centre