Postprocessing Log Data

Simply creating log data is often insufficient to meet users' needs described at the start of this chapter. Many times additional post-processing tools are needed to make sense of log data. Consider any of the following.

• Compaction services: Log data can quickly consume a lot of disk space. Web servers on high-traffic Web sites can easily generate hundreds of megabytes of data per hour . Sophisticated tools, such as compaction services, can substantially reduce the amount of disk space you need. Simpler approaches, such as a rolling log, in which data is maintained only for a specified reason and then replaced , can also keep logs under control. An example of a rolling log might be one in which only the last 60 minutes of data are stored.

• Synchronization tools: Logs created by several different applications may require synchronization to produce a useful result. A synchronization tool can help ensure that logs will be synchronized properly.

• Log viewers : It often makes sense to create tools that view the contents of logs for users. Of course, if you're using system management tools, such as the Windows Event Manager, these tools are handled for you.