The Journal - a proposed syslog replacement
Posted Nov 23, 2011 22:42 UTC (Wed) by cas
In reply to: The Journal - a proposed syslog replacement
Parent article: The Journal - a proposed syslog replacement
Here's an idea that I had a while ago: make a USB dongle that appears to be a USB-to-serial converter. Data that is sent to it is recorded in its flash; you configure your system to send log messages to it like a serial console.
This bit of the idea is good
You could make this relatively secure by not allowing a transition from logging mode to read mode without re-plugging.
but this bit isn't. It would make more sense and be far more usable if the USB dongle presented two devices.
The first device being a (perhaps serial) output device for writing log entries with maybe a control option for rotating log files by YYYYMMDD or whatever. each line sent to the device should have a "filename" (or syslog facility, or some other identifier) as the first word/field, with the remainder of the line being the log entry
The second a *read-only* USB storage device for reading the logs whenever you like.
so, the one device would provide write-once/append-only logging, and random read access to those logs
such a device could be made dirt cheap, too. it's just a USB flash disk with a slightly more capable processor & USB interface
to post comments)