|
Name |
|
Date |
Size |
#Lines |
LOC |
| .. | | 03-May-2022 | - |
| compat/ | H | 03-May-2022 | - | 731 | 591 |
| doc/ | H | 03-May-2022 | - | 2,636 | 1,804 |
| m4/ | H | 06-Nov-2018 | - | 9,075 | 8,203 |
| rulebases/ | H | 03-May-2022 | - | 92 | 70 |
| src/ | H | 03-May-2022 | - | 16,136 | 11,058 |
| tests/ | H | 03-May-2022 | - | 6,299 | 4,407 |
| tools/ | H | 03-May-2022 | - | 521 | 407 |
| AUTHORS | H A D | 04-May-2018 | 54 | 2 | 1 |
| COPYING | H A D | 04-May-2018 | 25.4 KiB | 491 | 409 |
| COPYING.ASL20 | H A D | 04-May-2018 | 8.9 KiB | 51 | 27 |
| ChangeLog | H A D | 06-Nov-2018 | 13.6 KiB | 265 | 264 |
| INSTALL | H A D | 06-Nov-2018 | 15.4 KiB | 369 | 287 |
| Makefile.am | H A D | 04-May-2018 | 244 | 16 | 12 |
| Makefile.in | H A D | 03-May-2022 | 27.9 KiB | 894 | 794 |
| NEWS | H A D | 04-May-2018 | 63 | 2 | 1 |
| README | H A D | 04-May-2018 | 2 KiB | 40 | 30 |
| aclocal.m4 | H A D | 06-Nov-2018 | 88.7 KiB | 2,363 | 2,167 |
| compile | H A D | 06-Nov-2018 | 7.2 KiB | 348 | 258 |
| config.guess | H A D | 06-Nov-2018 | 43.2 KiB | 1,481 | 1,288 |
| config.h.in | H A D | 06-Nov-2018 | 3.7 KiB | 149 | 105 |
| config.sub | H A D | 06-Nov-2018 | 35.3 KiB | 1,802 | 1,661 |
| configure | H A D | 06-Nov-2018 | 510.4 KiB | 17,659 | 14,661 |
| configure.ac | H A D | 06-Nov-2018 | 6.1 KiB | 199 | 175 |
| depcomp | H A D | 06-Nov-2018 | 23 KiB | 792 | 502 |
| install-sh | H A D | 06-Nov-2018 | 14.8 KiB | 509 | 329 |
| lognorm.pc.in | H A D | 04-May-2018 | 288 | 13 | 11 |
| ltmain.sh | H A D | 06-Nov-2018 | 316.8 KiB | 11,157 | 7,986 |
| missing | H A D | 06-Nov-2018 | 6.7 KiB | 216 | 143 |
| test-driver | H A D | 06-Nov-2018 | 4.5 KiB | 149 | 87 |
README
1Liblognorm is a fast-samples based normalization library.
2
3More information on liblognorm can be found at
4 http://www.liblognorm.com
5
6Liblognorm evolves since several years and was intially meant to be used primarily with
7the Mitre CEE effort. Consequently, the initial version of liblognorm (0.x)
8uses the libee CEE support library in its API.
9
10As time evolved, the initial CEE schema underwent considerable change. Even
11worse, Mitre lost funding for CEE. While the CEE ideas survived as part
12of Red Hat-driven "Project Lumberjack", the data structures became greatly
13simplified and JSON based. That effectively made libee obsolete (and also
14in parts libestr, which was specifically written to support CEE's
15initial requirement of embedded NUL chars in strings).
16
17In 2013, Pavel Levshin converted liblognorm to native JSON, which helped
18improve performance and simplicity for many client applications.
19Unfortunately, this change broke interface compatibility (and there was
20no way to avoid that, obviously...).
21
22In 2015, most parts of liblognorm were redesigned and rewritten as part
23of Rainer Gerhards' master thesis. For full technical details of how
24liblognorm operates, and why it is so fast, please have a look at
25
26https://www.researchgate.net/publication/310545144_Efficient_Normalization_of_IT_Log_Messages_under_Realtime_Conditions
27
28The current library is the result of that effort. Application developers
29are encouraged to switch to this version, as it provides the benefit of
30a simpler API. This version is now being tracked by the git master branch.
31
32However, if you need to stick to the old API, there is a git branch
33liblognorm0, which contains the previous version of the library. This
34branch is also maintained for important bug fixes, so it is safe to use.
35
36We recommend that packagers create packages both for liblognorm0 and
37liblognorm1. Note that liblognorm's development packages cannot
38coexist on the same system as the PKGCONFIG system would get into
39trouble. Adiscon's own packages follow this schema.
40