[Logcheck-devel] [patch] performance sucks bricks from my wall

[Todd Troxell]

Hi Jasper!

On Wed, Sep 21, 2005 at 02:30:28PM +0200, Jasper Spaans wrote:
> Today, my kernel went berserk and spewed out about 1 gig of debugging logs.
> 
> Baaaad kernel.

Eek!

> However, logcheck is equally bad as it has been grinding over this gigabyte
> for the last hour and a half, and isn't showing any signs of getting ready
> yet. And is causing my machine to not be as responsive as it should be.
> 
> This inspired me to write following patchlet to speed up the process
> somewhat. Concept-code, completely untested, and of course, doesn't compile.
> Might eat your mouse. (This patch is against the version in unstable)
> 
> Please let yourselves be inspired by this!

Thanks.  I got this patch working, but I'm not seeing a substantial increase
in performance.  I've attached a corrected version using your idea[0] as a
patch against current CVS.

I'm interested in what others find using this patch.  I have a feeling egrep
is just going to do a linear combination on the regexes whether they are all
in one file or not.

[0] Note that it still does not include disk-full checks.
-- 
Todd Troxell
http://rapidpacket.com/~xtat