"Fossies" - the Fresh Open Source Software Archive

Member "log_analysis-0.46/ChangeLog" (17 Apr 2012, 23288 Bytes) of package /linux/privat/old/log_analysis-0.46.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file.

    1 $Id: ChangeLog,v 1.148 2012/04/17 10:43:39 morty Exp $
    2 
    3 See the "NEWS" file for a summary.
    4 
    5 20120417: - 0.46
    6 20120416: - gui_mode_unknowns_pause_at: new option to pause at/after N unknowns
    7 20120413: - FIX: in gui mode, flags use_sprintf and delete_if_unique set to "1"
    8           - gui mode: restart shortcut: alt-r
    9           - FIX: in gui mode, deleting a pattern does not dirty the config
   10           - gui mode: count of raw events processed and events per second
   11           - core: add -I all_configs to see all configs listed out
   12           - new built-in pat subpatterns: date_iso datetime_iso version 
   13           - new built-in pat subpatterns: non_whitespace oid
   14           - gui mode: shortcuts for "go to top" and "go to bottom"
   15           - FIX: in gui mode, selecting category dest corrupts value
   16 20101129: - new built-in pat subpattern "interface"
   17           - gui mode: status bar should show visible counter
   18 20101128: - new built-in pat subpattern "real"
   19           - FIX: make sure all elements in pat are atomic i.e. in (?:...)
   20           - add RCS files to filename_ignore_patterns, i.e. .*,v
   21 20101127: - gui mode: "show unknowns and matches" jumps to first match
   22           - gui mode: status bar should show knowns counter
   23 20101125: - FIX: help says -b takes an option, but it doesn't
   24 20080904: - add support for stripping recent Linux timestamps (Tim Meushaw)
   25 20070725: - FIX: regression bug in application ID
   26 20061003: - config: nowarn and local should not be order dependent
   27 20061001: - gui mode: go to top, go to bottom, follow latest
   28 20060928: - 0.45
   29           - FIX: Tk 804.027 says labelPack takes "-side", not "side"
   30           - FIX: Tk 804.027 doesn't validate dests correctly; validation changed
   31           - FIX: Tk 804.027 gives annoying warning about Tk::Pane
   32           - FIX: Tk 804.027 has wrong size for misc configurables
   33           - core: deal with hostname that ends in .localdomain
   34           - gui mode: select by criteria
   35           - gui mode: find, clear find
   36 20060921: - gui mode: status indication for total and unknown events
   37           - gui mode: help|about log_analysis
   38 20060920: - 0.44
   39           - core: "nowarn" in config to disable certain config warnings
   40 20060914: - gui mode: gui_mode_config_savelocal: save only items changed locally
   41           - INCOMPATIBLE CHANGE: using the "gui_mode_config_savelocal" option 
   42             will not recognize local modifications made from earlier versions 
   43             of log_analysis.  Be careful!
   44           - gui mode: save config: should do RCS
   45           - new variables: rcs_command gui_mode_config_save_does_rcs
   46 20060913: - new variables: gui_mode_print_all gui_mode_save_all 
   47           - new variables: gui_mode_save_events_file
   48           - gui mode: save events and print events should use is_local
   49           - gui mode: make the event config use is_local
   50 20060912: - core: set nodename, osname, osrelease from uname(2)
   51           - gui mode: select knowns
   52           - FIX: gui mode: removing selected entries didn't update select count
   53           - gui mode: misc configurables should use is_local and wait for "ok"
   54           - gui mode: escape should kill windows
   55           - gui mode: gui_mode_save_config should use gui_mode_variable_config
   56 20060908: - core: make delete_if_unique more space efficient
   57 20060907: - core: @ifos to test for OS name
   58           - core: suppress_commands and suppress_footer should be user settable
   59           - document: @ifos suppress_commands suppress_footer
   60 20060705: - core: add support for memory_size_command as part of footer
   61 20051102: - core: commands_to_run should output in order
   62           - core: add support for "prepend var" and "prepend arr" (Ade Rixon)
   63 20051009: - gui mode: configure all patterns
   64 20050912: - gui mode: gui_mode_unknowns should care about input logtype
   65 20050911: - gui mode: configure pattern: test dests
   66 20050910: - gui mode: configure pattern: apply to existing unknowns
   67 20050908: - gui mode: configure pattern: validate dests
   68           - gui mode: configure pattern: show values of match variables
   69 20050906: - gui mode: configure pattern: deal with multiple selections
   70 20050905: - gui mode: configure pattern: basics done!
   71           - gui mode: configure pattern: apply after pause
   72 20050904: - gui mode: configure pattern: ongoing
   73 20050903: - gui mode: configure pattern: ongoing
   74 20050831: - remove Solaris 8+ msgids (Ade Rixon)
   75 20050830: - gui mode: buttons to show unknowns matching a pattern
   76 20050829: - gui mode: select unknowns, unselect all
   77           - gui mode: hide selected, hide unselected, unhide all
   78           - gui mode: selection count and hidden count on status bar
   79 20050828: - gui mode: configure pattern should validate pattern against data
   80 20050825: - core: minor performance boost: use English with -no_match_vars
   81           - gui mode: restrict operators from making changes
   82           - gui_mode_configure_disabled
   83           - gui_mode_configure_deny_users gui_mode_configure_deny_groups
   84           - gui_mode_configure_allow_users gui_mode_configure_allow_groups
   85           - INCOMPATIBLE CHANGES: no more gui_mode_configuration_disabled or 
   86             gui_mode_ignore_disabled
   87 20050823: - FIX: perform variable substitution for preprocessor directives
   88           - FIX: @@warn and all other processor directives should obey @@if
   89 20050822: - report mode: report_mode_combine_nodes
   90           - report mode: report_mode_combine_shows_nodes
   91           - report mode: report_mode_combine_is_partway
   92           - regression tests for report_mode_combine_nodes and friends
   93           - document: report_mode_combine_nodes
   94           - document: report_mode_combine_shows_nodes
   95           - document: report_mode_output_node_per_category
   96           - document: report_mode_combine_is_partway
   97           - document: logserver concerns
   98 20050817: - -I eval:$type
   99           - FIX: pat{port} should require a minimum of one digit
  100           - new pat: anything
  101           - new pat: whitespace
  102           - gui mode: configure patterns: beginning support
  103 20050816: - gui mode: improve responsiveness when paused
  104           - FIX: hang when a log starts with two LASTs (Dénes Ferenc Laborc)
  105 20050815: - gui mode: pause button and pause menu item
  106 20050814: - delete_if_unique -- feature to clean up after UNIQUE
  107           - regression tests for delete_if_unique
  108           - document: delete_if_unique
  109           - new pat: ssh_id
  110           - assorted config changes
  111 20050811: - deal with multi-line sendmail messages by including the first line
  112           - assorted config changes
  113 20050804: - 0.43
  114 20050404: - add some new patterns for DNS and ipmon
  115 20040408: - have -U print out unknowns as the script runs
  116           - new pat: mail_address
  117 20040206: - rule request by Andrew Collier
  118 20031022: - bz2 support in config
  119 20030425: - more config changes
  120           - new pats: mac and hex
  121 20030409: - sendmail 8.12.x stuff suggested by W C Waggoner
  122 20030408: - assorted config changes suggested by Jose M Duart
  123 20030402: - 0.42
  124           - INCOMPATIBLE CHANGE: dests may no longer contain backslash.
  125           - gui_mode: gui_mode_event_config: configure selected event
  126 20030401: - documentation and regression test updates
  127 20030331: - FIX: other_host_message and derived categories were broken
  128           - generate man pages from pod using pod2man rather than perldoc
  129           - regression tests for nodename, derive
  130 20020727: - FIX: perl 5.8.0 warning
  131 20020415: - action: keep_open
  132           - daemon mode: daemon_mode_foreground
  133 20020414: - autoload Tk/resizebutton.pm from distribution location
  134           - upgrade autoconf to 2.53
  135 20020412: - gui mode: resize buttons for hlists
  136           - gui mode: misc configurables
  137           - cleanup: real mode should conflict with daemon_mode
  138 20020411: - FIX: gui mode: "dest" should be saved last
  139           - gui mode: gui_mode_configuration_disabled
  140           - gui mode: gui_mode_ignore_disabled
  141           - new internal logtype: plain
  142 20020410: - cleanup: more pack arrays
  143           - gui mode: misc configurables: initial support
  144           - FIX: gui mode: view event config sometimes causes a hang on exit
  145           - FIX: multiple dests gives a warning
  146           - FIX: error rather than weird warning if unknown type for -t
  147           - add scan detection to internal config
  148           - report_mode_output_node_per_category
  149           - FIX: daylight savings bug near midnight if -d cross daylight savings
  150 20020409: - real_mode_no_actions_unless_is_daemon
  151           - daemon mode, daemon_mode, daemon_mode_pid_file
  152           - gui mode: <Return> bound to default action
  153           - dest_delete: remove a dest from pattern
  154           - cleanup: style caching in gui_mode_color
  155           - FIX: gui mode: beep for second event
  156           - gui mode: autosave menu option under file
  157 20020408: - 0.41
  158           - gui mode: "dirty" config
  159           - gui mode: better dialog for dirty exit
  160           - priority in dest config
  161           - report mode: support for priority in dest config
  162 20020406: - gui mode: view event config: apply changes in color
  163 20020405: - gui mode: view event config: do_action, description
  164           - cleanup: make arrays for standard packing args
  165 20020404: - gui mode: view event config: auto refresh
  166           - gui mode: view event config: color
  167           - gui mode: view event config: properties
  168 20020403: - cleanup: rename "h" tag from "node" to "host"
  169           - gui mode: view event config: "add" should check for duplicates
  170           - FIX: gui mode: "nested" events aren't printed by print_event_tree
  171           - gui mode: view event config: preliminary support 
  172           - cleanup: catch program errors in GUI mode with Tk::Error
  173           - cleanup: do color lookup only if needed
  174 20020402: - color, description, and do_action in dest and event config, too
  175           - gui mode: save-on-exit dialog
  176           - FIX: days_ago doesn't always get loaded properly from config
  177           - cleanup: rename "tag" as "match", use tag names instead of tags
  178           - cleanup: no more need for gui_mode_child_pid
  179           - regression test: old versions of perl
  180           - FIX: gui mode: deep recursion in gui mode
  181           - cleanup: use "after" instead of "fileevent" in gui mode
  182           - cleanup: don't modify optional_log_files
  183           - FIX: gui mode: dynamically grab GUI selections for print and save
  184 20020401: - -F: use minimal config
  185           - -i: suppress (most) default includes
  186           - -D: define preprocessor directives
  187           - FIX: remove a couple of perl5.6isms for 5.00503 support
  188           - FIX: corrupted patterns: pat{host}/g should be pat{host}
  189           - FIX: gui mode: updates to count should have color
  190 20020331: - gui mode: more ignore options
  191           - remove tests from public distro
  192           - make ignores work in regular mode, too
  193           - gui_mode_config_autosave, gui_mode_config_file
  194           - gui mode: savable user config
  195           - gui mode: no backlogs
  196 20020330: - event config
  197           - priority, ignore
  198           - cleanup: make ignore more general
  199           - cleanup: make ignore more efficient
  200           - cleanup: use config_die more
  201           - cleanup: config_arguments to make config code cleaner
  202           - cleanup: parser should have a full state machine
  203 20020329: - gui mode: select all
  204 20020328: - detect if a pattern or dest for a pattern has been duplicated
  205           - keep_all_raw_logs to keep all raw logs in %A (real_mode only)
  206           - gui mode: savable config
  207           - cleanup: better data structure for patterns, dests
  208           - FIX: gui mode: alt-q exits with non-zero exit code
  209           - gui mode: save should warn for overwrite
  210           - gui mode: gui filter support for print and save
  211           - gui mode: view raw logs
  212           - FIX: add var was acting like set var
  213           - cleanup: implement config_file via preprocessor variable
  214           - -t: type force; type_force config variable
  215           - open_command_is_continuous: for tail -f, tcpdump, etc. in real_mode
  216           - cleanup: review &real_mode_check_function
  217           - cleanup: move &open_command,&type calls into &open,&process_handle
  218           - make open_command and decompression_rules work in real_mode
  219           - FIX: real/gui mode: log lines not yet terminated by newline
  220 20020326: - FIX: real/gui mode: real mode doesn't handle compressed files right
  221           - FIX: gui mode: -g -I evals dies early
  222           - FIX: real/gui mode: fseek/seek
  223 20020325: - 0.40
  224           - gui mode: save selected events
  225           - cleanup: remove gui_mode_entry; use gui_mode_hashref
  226           - gui mode: save all events
  227           - FIX: gui mode sometimes dies with errors about seek
  228           - gui mode: print all events
  229           - gui mode: ignore (for now, just category + data)
  230           - document: do_action, use_pipe, action_format, default_action_format
  231           - document: throttle, throttle_format, default_throttle_format
  232           - document: \n, \t, \\ in tags, print_format, print_command
  233 20020324: - gui mode: status
  234           - gui mode: faster exit
  235 20020323: - handling for \n, \t, \\ wherever tags are processed
  236           - gui mode: print selected events
  237 20020320: - cleanup: $name_pat => $pat{name}
  238           - document $pat{name}, undocument $name_pat
  239           - -I pats
  240           - real mode: do_action
  241           - action: use_stdin
  242           - action: throttle, throttle_format, default_throttle_format
  243           - action: action_format, default_action_format
  244 20020316: - configurable pattern space $pat{name}, ie. $pat{ip}
  245 20020315: - FIX: temp file is sometimes deleted before it's read
  246           - cleanup: use File::Basename instead of sub basename
  247           - cleanup: use $prog instead of $0
  248           - make test: file, gz, command, gz+command with pipe, 
  249             gz+command with no pipe
  250 20020315: - 0.39
  251           - FIX: wtmp.gz stopped working
  252           - document: real mode color, colors, -g, gui_mode, gui_mode_modifier
  253           - document: -I actions, -I colors
  254           - document: action:, command:, window:, window_command
  255           - document: default_login_action, login_action, -b, real_mode_backlogs
  256           - document: days_ago and real_mode interaction
  257           - document: description
  258 20010828: - workaround for log case problem
  259 20010811: - gui mode: color support
  260 20010809: - new category config: description (ie. for your operators)
  261           - gui mode description support
  262 20010808: - -I actions
  263           - action config: action:, command:, window:, window_command
  264           - login config: default_login_action, login_action
  265           - login menu entry
  266           - action menu entry
  267 20010807: - -g for a primitive gui mode (requires Tk).
  268           - gui mode: way to resize fields
  269           - variables: gui_mode, gui_mode_modifier
  270           - event menu with "clear counts" and "login"
  271           - switch gui from ROText to HList
  272 20010724: - real_mode_output_format now takes %R for the raw log line
  273 20010718: - real mode color
  274           - cleanup: improve variable importing
  275 20010716: - 0.38
  276 20010715: - new dest syntactic sugar: you can explicitly say "CATEGORY".
  277           - INCOMPATIBLE CHANGE: config_version is now mandatory
  278           - linux kernel firewall categories now don't print source port
  279 20010714: - new dest: UNIQUE category, ie. method to handle "unique" counts
  280 20010713: - cleanup: let changes to catch-22 variables take immediate effect
  281 20010712: - document per-category config, sort, filter, derive
  282 20010711: - more per-category filters: and, or, none
  283           - default_filter
  284 20010710: - derivable categories: add, subtract, remove
  285 20010709: - per-category config
  286           - per-category filters: >=, <=, <, >, =, !=, top N, bottom N, 
  287             top_strict N, bottom_strict N, top_strict N%, etc.
  288           - per-category sorting: reverse, value, number/string/funky, none
  289           - default_sort is more flexible (ie. reverse, value, etc.)
  290           - @@error, @@warn: directives to send the user a message
  291           - filename_ignore_patterns: patterns of filenames to ignore when 
  292             including dirs
  293 20010709: - patch from Nicolas Chuche to allow full use strict mode
  294 20010701: - INCOMPATIBLE CHANGE: date_format defaults to %Y_%m_%d
  295           - INCOMPATIBLE CHANGE: -o should not output to standard out (see -O).
  296           - -O (or output_file_and_stdout): also output to standard out
  297           - cleanup: replace range detection with explicit $in_multiday 
  298             variable
  299           - allow simple days-ago in a range (ie. -d7-1 for last week's logs).
  300 20010630: - cleanup: treat version as a string, compare using funky_cmp
  301 20010629: - 0.37
  302 20010326: - cleanup: don't update count in real_mode; memory leak
  303 20010325: - real mode log rollover detection
  304           - new variables real_mode_sleep_interval, real_mode_check_interval
  305           - funky sort: sort numbers separately to handle IP address better
  306           - new global variable: default_sort.  Can be set to string,
  307             funky, or numeric, defaults to funky
  308           - INCOMPATIBLE CHANGE: new default sort is "funky"
  309 20010324: - -r: continuous, tail -f style output
  310           - real_output_format: new global for the output in real_mode
  311           - field widths (optional) for tags (ie. %10n, %-10n)
  312 20010321: - preprocessor directives a la aide: @@define, @@undef, @@ifdef, 
  313             @@ifndef, @@ifhost, @@else, @@endif, @@ifhost, @@{VAR}
  314           - INCOMPATIBLE CHANGE: replace end with @@end
  315           - implement and allow: -d range with -a
  316           - new required config variable: output_message_all_days_in_range
  317 20010318: - -I patterns
  318           - -I help
  319           - -I log_types
  320 20010315: - 0.36
  321           - document -o
  322           - make -I internal_config and -v run before any config is looked at
  323           - -I log_files: show actual log files to be parsed
  324 20010313: - FIX: syslog server with exactly one logging host and none of its
  325             own log messages doesn't get noticed as multiple hosts
  326           - complete code review
  327           - -I config_versions
  328           - change in multiple-host message
  329           - file_version: declares the file version for config files
  330           - support for a range of days, ie. -d 2001_02_01-2001_02_28
  331           - internally merge old and new configs
  332 20010310: - -I categories: list all categories (ie. from configs and implicit)
  333           - pipe_decompress_to_open: don't use a tempfile
  334           - document decompression + open_command interaction (ie. tempfile)
  335           - minor rule updates
  336           - localize hostnames/nodenames relative to domain
  337           - domain: allow either manual setting, or use /etc/resolv.conf domain
  338           - leave_FQDNs_alone: don't localize hostnames/nodenames
  339 20010309: - FIX: 3rd field in raw_rules defined as false should not be an error
  340           - Support for -d as absolute date, ie. 2001_03_02; tested 1902-2037.
  341           - INCOMPATIBLE CHANGE: change -F to -I internal_config
  342           - INCOMPATIBLE CHANGE: change -D to -I evals
  343 20010111: - 0.35
  344 20010108: - more elegant solution to making local user configs higher priority
  345 20010103: - make local user configs higher priority
  346 20010101: - document: new config, SKIP, LAST, multiple categories,
  347             word_pat, use_sprintf, counts
  348           - make new config rules implicitly end with \s*$
  349 20001220: - replace all /usr/local instances with prefix
  350 20001219: - modified my local copy of automake to do chmod 755 instead of 777.
  351             What's up with that?
  352 20001217: - implement SKIP in new framework
  353           - implement LAST in new framework
  354           - optional use_sprintf for format
  355           - implement counts
  356           - logging to mutiple categories
  357           - convert old internal config to new framework
  358 20001208: - INCOMPATIBLE CHANGE: no more 4th field code hook for raw_rules.  
  359             If you were using it, let me know why and if I can't think of a
  360             workaround, I'll add it back in.
  361           - added in various fancy config options
  362           - added in word_pat
  363           - took care of last message issues
  364 20001207: - document SIGINT stuff
  365 20001206: - fixed bug: repeating internal config gives errors, found by 
  366             Paul Jakma
  367 20001129: - -S: suppress output footer
  368 20001031: - 0.34
  369           - minor rules updates
  370 20000828: - catch SIG_INT for early output
  371           - priority support, with new "priority" variable
  372 20000827: - make -U output the type 
  373           - -u unknownsdir: trick to make writing rules easier 
  374           - INCOMPATIBLE CHANGE: take required_log_file out of the config; 
  375             it wasn't playing nicely with everything else.  If you were
  376             using it, please revert to the old version and let me know.
  377           - minor rule updates
  378 20000819: - 0.33 
  379           - autoconf support to autodetect perl location 
  380           - minor rule updates 
  381 20000616: - 0.32 
  382 20000612: - sendmail 8.10 queue IDs
  383           - allow whitespace at the beginning of config lines 
  384 20000418: - 0.31
  385           - more documentation, samples 
  386 20000416: - 0.29
  387           - fixed "-" vs. "_" sloppiness in old config, standardizing on "_"
  388           - make -p only be legal when mail_address or -m
  389           - assorted documentation
  390           - strip leading whitespace from blocks, vars
  391 20000412: - pgp_rules, -p
  392 20000119: - mail_user_pat
  393 20000114: - umask bugfix
  394 20000113: - decompression_rules
  395           - do proper temp files
  396           - umask
  397           - skip old files
  398 20000112: - include version info in standard output
  399           - fix -U
  400           - change -U to *only* output unknowns
  401           - document problem with % in crontab
  402 20000106: - -v
  403           - allow_nodenames
  404           - check patterns
  405           - reorganize docs
  406 20000105: - -o to generate an output file
  407           - show_all, days_ago, output_file in config
  408           - base unknowns on types rather than files
  409           - merge unknowns into count
  410           - -N for process all nodenames
  411 20000104: - strftime for date_format (global and extension)
  412           - sort categories
  413           - document catch-22
  414 20000103: - ignore_categories
  415           - priority_categories
  416 20000102: - tag substitution for mail_comand
  417           - include, and include_if_exists
  418           - include_dir, include_dir_if_exists
  419 20000101: - import PATH
  420           - import nodename, osname, osrelease
  421 19991231: - process_tags
  422           - cleaned up implied ^
  423           - open_command
  424           - pre_date_hook
  425 19991230: - implemented "remove arr"
  426           - fixed a bug where optional scalars would be default to a null value
  427           - documentation
  428           - redid config_version into its own keyword
  429 19991229: - sendmail handler
  430           - a bit of error checking when building the config
  431 19991228: - generic config mechanism for arbitrary log types
  432           - show elapsed time
  433           - usage function
  434           - -D to dump default config
  435           - -s to suppress running extra commands
  436           - version check
  437           - wrote sulog handler
  438           - added an "eval code" item
  439           - got "last message repeated" working
  440           - include files
  441 19991227: - added huge amounts of capability; not even recognizable
  442 19991223: - converted to perl (from sh), renamed to log_analysis (from do_log)
  443 19990607: - original version