varnish-misc Digest, Vol 86, Issue 1

[Graham Lyons]

That's great, thanks to Jonathan and everyone else who replied. Some
interesting stuff in there.

On 01/05/2013 11:00, "varnish-misc-request at varnish-cache.org"
<varnish-misc-request at varnish-cache.org> wrote:

>Send varnish-misc mailing list submissions to
>       varnish-misc at varnish-cache.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
>       https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>or, via email, send a message with subject or body 'help' to
>       varnish-misc-request at varnish-cache.org
>
>You can reach the person managing the list at
>       varnish-misc-owner at varnish-cache.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of varnish-misc digest..."
>
>
>Today's Topics:
>
>   1. RE: Varnishlog and Splunk (jonathan.huot at thomsonreuters.com)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Tue, 30 Apr 2013 13:29:30 +0000
>From: <jonathan.huot at thomsonreuters.com>
>To: <varnish-misc at varnish-cache.org>
>Subject: RE: Varnishlog and Splunk
>Message-ID:
>       <8E656B642592B942AE317E2AFAE0ABA13F9BE324 at UK2P-ERFMMBX10.ERF.thomson.com>
>
>Content-Type: text/plain; charset="utf-8"
>
>Hi Graham,
>
>Splunk didn?t care with separate lines or not, it?s all about regexp. You
>can setup your Splunk events by adding any separator you want. It can be
>a line feeds or any separator (ReqStart/ReqEnd)
>Currently, we?re fetching records (about 10 lines for each record) using
>Splunk without any issues.
>
>However, I will suggest you to use varnishncsa instead of varnishlog
>because the main purpose of ncsa is to write one line for each requests.
>You can setup the ?-F ? option to add more HTTP headers if needed.
>
>
>Jonathan Huot
>Phone: +33(0)1.47.62.78.65
>
>From: varnish-misc-bounces at varnish-cache.org
>[mailto:varnish-misc-bounces at varnish-cache.org] On Behalf Of Graham Lyons
>Sent: jeudi 25 avril 2013 12:16
>To: varnish-misc at varnish-cache.org
>Subject: Varnishlog and Splunk
>
>Hello,
>
>Has anyone had any experience of putting output from varnishlog into
>Splunk? My experience of Splunk so far has involved access log type
>sources with events on separate lines, which is obviously quite different
>to what comes out of varnishlog.
>
>If there's any prior art it would interesting to hear.
>
>Thanks,
>Graham.
>
>
>
>----------------------------
>
>http://www.bbc.co.uk
>This e-mail (and any attachments) is confidential and may contain
>personal views which are not the views of the BBC unless specifically
>stated.
>If you have received it in error, please delete it from your system.
>Do not use, copy or disclose the information in any way nor act in
>reliance on it and notify the sender immediately.
>Please note that the BBC monitors e-mails sent or received.
>Further communication will signify your consent to this.
>
>---------------------
>
>This email was sent to you by Thomson Reuters, the global news and
>information company. Any views expressed in this message are those of the
>individual sender, except where the sender specifically states them to be
>the views of Thomson Reuters.
>-------------- next part --------------
>An HTML attachment was scrubbed...
>URL:
><https://www.varnish-cache.org/lists/pipermail/varnish-misc/attachments/20
>130430/f029e1dd/attachment-0001.html>
>
>------------------------------
>
>_______________________________________________
>varnish-misc mailing list
>varnish-misc at varnish-cache.org
>https://www.varnish-cache.org/lists/mailman/listinfo/varnish-misc
>
>End of varnish-misc Digest, Vol 86, Issue 1
>*******************************************



-----------------------------
http://www.bbc.co.uk
This e-mail (and any attachments) is confidential and
may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in
error, please delete it from your system.
Do not use, copy or disclose the
information in any way nor act in reliance on it and notify the sender
immediately.
Please note that the BBC monitors e-mails
sent or received.
Further communication will signify your consent to
this.
-----------------------------