Opened 16 years ago
Closed 16 years ago
#94 closed enhancement (fixed)
incident-gatherer: incremental reclassification
| Reported by: | Brian Warner | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | 0.3.1 |
| Component: | logging | Version: | 0.3.0 |
| Keywords: | Cc: |
Description
In the current release, you can tell the incident gatherer to reclassify all of its incidents (say, when you've updated the classification functions) by deleting the classified/ directory and bouncing the gatherer.
However, this means you have to reclassify *everything*, when usually you just want to reclassify the things in classified/unknown . The usual workflow is to keep updating your classification functions until everything the gatherer has stashed gets a category.
So we need a better way to reclassify just a few incidents. One way to do this would be to just delete the classified/unknown file. The IG could read everything in classified/* and then reclassify whatever was *not* mentioned in there.
Another possibility is an explicit command, like 'flogtool classify-incident', but that seems trickier to me.
[2f621fff76eeadd07f9d38c00f23bccd925ef7d5] closes this, using the first approach: each time the gatherer is started, it reclassifies everything that isn't listed in one of the existing classified/* files.