24 messages in ru.sysoev.nginxRe: Centralized logging for multiple ...
FromSent OnAttachments
Kingsley ForemanApr 12, 2009 8:26 pm 
Anton YuzhaninovApr 13, 2009 11:46 am 
Gena MakhomedApr 13, 2009 12:31 pm 
Igor SysoevApr 15, 2009 6:12 am 
Glen LumanauApr 15, 2009 6:23 am 
Dave CheneyApr 15, 2009 6:32 am 
Kingsley ForemanApr 15, 2009 6:35 am 
Glen LumanauApr 15, 2009 6:35 am 
Dave CheneyApr 15, 2009 7:06 am 
Kon WilmsApr 15, 2009 8:40 am 
Michael ShadleApr 15, 2009 8:43 am 
W. Andrew Loe IIIApr 16, 2009 7:37 pm 
Gabriel RamugliaApr 16, 2009 8:41 pm 
W. Andrew Loe IIIApr 16, 2009 8:54 pm 
Michael ShadleApr 16, 2009 9:08 pm 
Gabriel RamugliaApr 17, 2009 3:32 am 
Michael ShadleApr 17, 2009 8:42 am 
Gabriel RamugliaApr 17, 2009 10:36 am 
Gabriel RamugliaApr 17, 2009 10:52 am 
Gabriel RamugliaApr 17, 2009 5:06 pm 
Kon WilmsApr 17, 2009 6:02 pm 
Gabriel RamugliaApr 18, 2009 2:22 am 
Kon WilmsApr 18, 2009 9:15 am 
Gabriel RamugliaApr 18, 2009 12:02 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: Centralized logging for multiple serversActions...
From:Gabriel Ramuglia (ga@vtunnel.com)
Date:Apr 17, 2009 5:06:38 pm
List:ru.sysoev.nginx

I was able to use the wayback machine to find the most recent pricing for splunk. It seems that 1gb / day license costs $10k and 10gb / day of log volume is going to set you back $30k. Above that and you have to ask them for pricing. That's really not going to work seeing as how I'm doing more like 100gb / day. Their current website doesn't have any prices at all and just asks that you contact their sales department.

I do like what their website talks about how their product works, it seems to be pretty much what I need / am looking for. I might be willing to pay $10k for a license that does 200gb / day, but $30k for one that does 10gb, that's not going to work for me.

It sounds cool from a theoretical perspective. I read a book, scalable internet architectures, which champions the cause of spread for all kinds of uses. Getting the thing working, however, is not worth the effort. And trying to pump a lot of raw log files through it in real time, yeah, don't bother giving yourself that headache.

On Fri, Apr 17, 2009 at 8:43 AM, Michael Shadle <mike@gmail.com> wrote:

On Fri, Apr 17, 2009 at 3:32 AM, Gabriel Ramuglia <ga@vtunnel.com> wrote:

I've used spread for centralized logging before, it's a horrible clusterF. If you want details as to why, let me know.

no thanks. i have no experience with it and i don't really need something like it right now (hopefully i'd use gearman, as i talk with  the main guy behind it a lot now) - it's not a 1:1 concept-wise, but you can probably get gearman to do what you'd want spread to do.

i'll take your word for it since i've never bothered. it just looked cool :)