[PATCH-RFC] POSIX Event Logging, kernel 2.5.6 & 2.4.18

Larry Kessler
2002-03-12T22:16:27Z

Please cc: kessler@us.ibm.com with your comments.

Patch for kernel version 2.5.6:
http://prdownloads.sourceforge.net/evlog/evlog-1.3.0_kernel2.5.6.patch
Patch for kernel version 2.4.17, 2.4.18:
http://prdownloads.sourceforge.net/evlog/evlog-1.3.0_kernel2.4.17.patch

This patch, in combination with the event logging and event
notification user library, provides a comprehensive event
logging package based on the draft POSIX standard 1003.25.
See http://evlog.sourceforge.net/ for details and downloads.

A summary of the kernel patch:
1) A static kernel buffer is implemented for POSIX events logged
in the kernel. Size is configurable during kernel build.
2) If the buffer overruns the oldest events are kept, newest
discarded, and a count of discarded events is reported.
3) Optionally, POSIX events can be created from printk messages
(printk messages still go to /var/log/messages, as before)
4) Functions are provided for:
- logging directly to kernel event buffer (text string or
binary data which gets formatted outside of the kernel)
- registering facilities beyond the standard ones in syslog.h
(device drivers can have facility other than KERN)
5) Events are displayed on the system console as single-line
summary messages (based on printk's default console logging level).

Please be clear that this is NOT intended to replace printk and
syslog, but to coexist with them and provide additional
capabilities not available with printk/syslog that are highly
desirable in large servers and Telecom environments (to name a few).

Larry Kessler