The Enhanced Event Logging System

Automatic log archival

EELS can be configured to archive records from the EELS database whenever the database reaches a specific size. All records that are archived in this way are removed from the database.

The configuration information for automatic archival is contained in an auto-archive parameter block. Multiple auto-archive blocks are allowed within a single configuration file. The parameter block contains the following tags:

source
query
filename
trigger
frequency

The EELS daemon (eelsd(1Meels)) monitors the size (specified by trigger) of the table specified in source at an interval specified by frequency. When the size is reached, eelsd calls eels_log_archive(1Meels) to archive the results of query to an archive file called filename; the archived records are then removed from the database.

For more information on archiving, see ``Archiving EELS databases''.