tlog icon indicating copy to clipboard operation
tlog copied to clipboard

Consider record compression for repeated characters

Open trevor-vaughan opened this issue 6 years ago • 2 comments

I noticed that my logs are getting a LOT of data that consists of just the \ character repeated.

I would suggest making that a multiplier field so that there isn't so much data hitting the logs constantly.

Something like %tbuf(100*)\ or the like would a lot of space, particularly when using tlog with multiple hosts.

trevor-vaughan avatar Jul 17 '18 12:07 trevor-vaughan

@trevor-vaughan lots of \ characters repeated might be you recording yourself viewing the logs ;) Happened to me more than once. That said, optional compression might be good, as long as the logs get uncompressed for searching somewhere (e.g. in Elasticsearch).

spbnick avatar Jul 17 '18 14:07 spbnick

@spbnick Yup, that was it. It's going to be really common though since one of the most commonly audited accounts is root. I'd still like the feature :-D

trevor-vaughan avatar Jul 17 '18 15:07 trevor-vaughan