[PATCH] Extending the debugging system with per-class logfiles

[Ralph Böhme]

On Tue, Dec 18, 2018 at 06:15:27AM +1300, Andrew Bartlett wrote:
>On Mon, 2018-12-17 at 17:15 +0100, Ralph Böhme via samba-technical
>wrote:
>> On Wed, Dec 12, 2018 at 11:04:50PM +0100, Ralph Böhme via samba-technical wrote:
>> On Mon, Dec 10, 2018 at 04:26:27PM +0100, Ralph Böhme via samba-technical wrote:
>> > ok, this version seems to pass CI. If anyone has the time, please take
>> > a look. The more eyes the better, this is a core infrastructure piece
>> > and I don't wanna screw it. :)
>> >
>> > CI of older version, minimal changes since then:
>> > https://gitlab.com/samba-team/devel/samba/pipelines/39906963
>> >
>> > CI attached patchset:
>> > https://gitlab.com/samba-team/devel/samba/pipelines/39941794
>>
>> latest version attached with some patch reordering and some minor changes.
>>
>> CI: https://gitlab.com/samba-team/devel/samba/pipelines/40028064
>>
>> Please review & push if happy. Thanks!
>
>I've not looked into the details or syntax yet, but I would say I did
>have a client request exactly this concept recently, because otherwise
>the audit logs intended to be fed off to a log engine just overwhelm
>the rest of the logs intended to be read by human administrators.

:) The use case that triggered this was rsyslog overloaded by the syslog audit 
messages storm coming from VFS full_audit with all trace points enabled.

-slow

-- 
Ralph Boehme, Samba Team                https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
GPG-Fingerprint   FAE2C6088A24252051C559E4AA1E9B7126399E46