Quentin, look at the several logconfig,xml files that are arround. A part of the batch server: <!-- Batch File Appender, match the output log file name to the input -log statement --> <appender class="FileAppender" name="BatchFileAppender"> <param name="Append" value="false"/> <param name="Unique" value="true"/> <param name="FileNamePattern" value="%S{App.Log}%d{yyyy.MM.dd_hh.mm.ss}.log"/> <layout> <param name="ConversionPattern" value="%m"/> </layout> </appender> What you see is the log file is created with this to support the date/time settings altoudh it will be place in the current dir is of that batch proces. A part of tracing the connec server (similar workspace server): <!-- Rolling log file with default rollover of midnight --> <appender class="RollingFileAppender" name="TimeBasedRollingFile"> <param name="Append" value="false"/> <param name="Unique" value="true"/> <param name="ImmediateFlush" value="true"/> <rollingPolicy class="TimeBasedRollingPolicy"> <param name="FileNamePattern" value=" ***/log/SASEMCS_%d_%S{pid}.log"/> </rollingPolicy> <layout> <param name="HeaderPattern" value="Host: '%S{hostname}', OS: '%S{os_family}', Release: '%S{os_release}', SAS Version: '%S{sup_ver_long2}', Command: '%S{startup_cmd}'"/> <param name="ConversionPattern" value="%d %-5p [%t] %u - %m"/> </layout> </appender> What you see is essential a altlog function with all dynamic date/time settings and a buffer flush. Following programs is possible that way. Logparsing can still be done on those. As the questions what to look for is not really determined .... Mostly used for looking for the evidence some proces had som weird abend. As of your remarks Is see oor different history. Educated as "Systems programmer" the job was wiht a lot of others on the technical area for the process of programmers/testers/expoitation. A real OS has good logging capacitties MVS wiht SMF did come really far. Performance, capacity cost usage secuiryt and errors aside other loggings as in SDSF SYSlog etc.. Collecting and processing is a BI analytics approach. At Windows and Unix those are missing. So it is undestandable coming form different areas we have different viewpoint. For exploitation the processes should be clean (notes warnings error) and the RC being the only to be trusted setting (schedulers). The developers should deliver the code that way. The testers (system-intergration acceptance) validating those reqs. With that no logparsing is necessary. I have seen all similar kind of activities of building something as devlopers becaus they assume they are needing that although most of it is already availabel in some other way but kept hidden (the untold options).
... View more