Re: [netmod] I-D Action: draft-ietf-netmod-syslog-model-10.txt

Phil Shafer <phil@juniper.net> Tue, 01 November 2016 00:49 UTC

Return-Path: <phil@juniper.net>
X-Original-To: netmod@ietfa.amsl.com
Delivered-To: netmod@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E378F1293F4 for <netmod@ietfa.amsl.com>; Mon, 31 Oct 2016 17:49:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.903
X-Spam-Level:
X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n-yPE0B3-Gts for <netmod@ietfa.amsl.com>; Mon, 31 Oct 2016 17:49:16 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-by2nam03on0112.outbound.protection.outlook.com [104.47.42.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78333120726 for <netmod@ietf.org>; Mon, 31 Oct 2016 17:49:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=l6uDVZk8mW+TRVUSQ9LDtOuMdc0t6K1Nth/Vm9vAnoo=; b=idxwdSHnEWZtA9aLFmfJdYS3uIIF11/gv9IX+6kK6JcY/b8voMSCcY0RrVUFe8eeueufEiToM4773+K4yR9Tzp7l6xvrsP6AwhOerAFdxijpwBkjfCj9XaTwMdj4UFcYMhZN3yPy+K5YszNjL/d2sZWFUGX6SEMJb0Yh790SN3I=
Received: from CO2PR05CA023.namprd05.prod.outlook.com (10.141.241.151) by DM2PR0501MB1343.namprd05.prod.outlook.com (10.160.130.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1; Tue, 1 Nov 2016 00:49:12 +0000
Received: from BN1BFFO11FD030.protection.gbl (2a01:111:f400:7c10::1:140) by CO2PR05CA023.outlook.office365.com (2a01:111:e400:1429::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.707.1 via Frontend Transport; Tue, 1 Nov 2016 00:49:12 +0000
Authentication-Results: spf=softfail (sender IP is 66.129.239.19) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.19 as permitted sender)
Received: from P-EMFE01C-SAC.jnpr.net (66.129.239.19) by BN1BFFO11FD030.mail.protection.outlook.com (10.58.144.93) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id 15.1.693.6 via Frontend Transport; Tue, 1 Nov 2016 00:49:11 +0000
Received: from p-mailhub01.juniper.net (10.160.2.17) by P-EMFE01C-SAC.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Mon, 31 Oct 2016 17:49:10 -0700
Received: from idle.juniper.net (idleski.juniper.net [172.25.4.26]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id uA10n9Le031120 for <netmod@ietf.org>; Mon, 31 Oct 2016 17:49:10 -0700 (envelope-from phil@juniper.net)
Received: from idle.juniper.net (localhost [127.0.0.1]) by idle.juniper.net (8.14.4/8.14.3) with ESMTP id uA10j6vH004555 for <netmod@ietf.org>; Mon, 31 Oct 2016 20:45:06 -0400 (EDT) (envelope-from phil@idle.juniper.net)
Message-ID: <201611010045.uA10j6vH004555@idle.juniper.net>
To: netmod@ietf.org
In-Reply-To: <147794524409.23193.8224652494540792820.idtracker@ietfa.amsl.com>
Date: Mon, 31 Oct 2016 20:45:06 -0400
From: Phil Shafer <phil@juniper.net>
MIME-Version: 1.0
Content-Type: text/plain
X-EOPAttributedMessage: 0
X-MS-Office365-Filtering-HT: Tenant
X-Forefront-Antispam-Report: CIP:66.129.239.19; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(7916002)(2980300002)(189002)(199003)(626004)(47776003)(5660300001)(81156014)(7696004)(53416004)(81166006)(76506005)(8676002)(7126002)(8276002)(69596002)(11100500001)(5003940100001)(356003)(7846002)(230783001)(92566002)(86362001)(2810700001)(106466001)(48376002)(586003)(305945005)(107886002)(450100001)(2351001)(68736007)(6916009)(97736004)(77096005)(87936001)(1076002)(2950100002)(50986999)(2906002)(54356999)(50466002)(105596002)(110136003)(8936002)(189998001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR0501MB1343; H:P-EMFE01C-SAC.jnpr.net; FPR:; SPF:SoftFail; PTR:InfoDomainNonexistent; MX:1; A:1; LANG:en;
X-Microsoft-Exchange-Diagnostics: 1; BN1BFFO11FD030; 1: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
X-MS-Office365-Filtering-Correlation-Id: 9b12e59c-550d-4101-5c1b-08d401f0e56e
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 2:U5V2Huxa9CBlYSgyYXo+L5iLmtuR5iR2XzVkB1BBSVinvK5lXUAifhl/gHctRKymqAQ9R7j1acw9Z8Rctrm9g5I/k9gbCjTE1DA9M9vpVIOZ888/R6xuU0G4ZXC6vLHqfeMaBi3WzYvRhFiT/Nt9NrKBP5TiROp9mAiQt627Kcj/BA/OoMnMG4/qsQsBJuzA9+7BC2TKXdywO8goAO1fgA==; 3:ZWDf4YwVLdtbz/mtvBdqWATo8VYVknIled3a1flNMyxNw9qeocBXvgSMqczhPPgkhl+VDsP7cltbSO39rqZ/3tC9+3NcRbsEE/OQ06btA09KP+i5sAF8Qa4iLbvmZMg45XuYkcjS1zBTfE0+mb95d9YDZc8jQJwfZfP1GxBmZzifvJ8/+6ycY+3wc0v8nyk6wQfiHsJd+T8pQvP2VaEXjdbtvON0r+SnA2PdSPhqBa3Cv+UzJLBlWN3cfZ+YoEUz
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR0501MB1343;
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 25:CctyL+zWnEfCYyu3Z14BtV7lzBKFJHGAUgATuLqO9djI4FbrbISU4oswWoBfKkSbgqgIVyCO6IsouPVBPaerw8Yj/oMFh5Kxd7ZNSKKyBvbC9ku07XXOGRHblNpxqOT27JnPjAlZaPQgLjzsZ10bzPgNBYzw58MV0RHmJ8PxHBkdloRT5KufPhR9OjfAVSOBfBKa0Hg19ggJHD4n3U+v21xqHXeomMATYS5Z6tbXRSZgQq6dV7nPBKNsRDQf6MG+BpJdTGdLjfjoHgbf9XjW3Xzjsegry8e/KIimp88Eo/lItx7XCM8+4ahF5GQDUz6BPFD6AcAvWzzUbBcbURGML7mIiApZQW+vvNJj4yfe0QQmobpMi250vYiHeqVoTYXwfsC3pDzyBqnEt4afLl1RvlKuG9ok+n6aT4k4J6jzUcLZpwD8Bdr/FhVL2sTWGePfZDGZiSufCs+QkRAfXrZ4g6afBMxEkuK6F6rDxsPaHwuG8g40PU9Jhf2XgHbYZoxFJWA0Y6XSw1Dwx1S08T37dfWJwqV1b4TCXtA5WfmRDNEvuGBatdY31OmSUjc//CecP+2toZLyrsWbCuXLeyEwcAcaMHuQdnzse3aev7qrLI/c3QKIdyytPJVmM4dNfXeJlLTnwOVh9u7L9RCYbRscgRyYT/AQ0G1kXlc06Q8/89LKG7jYgAkm/wnvoqQtPz9QjeyniVwtZXWt3i6lw7ABchFnTifVSo1y1/KhrOcJF7jOg1bQCyJMAGBD/1odZVIEnI1WOHKO/CD2Sbdgjll/ng==
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 31:03rWSMdtWI6M8kUHByCed5ZSNueZrQ+askQIpzMQudKDzUlCcxZm6Od5e/zFJM1KbYNlcH+V/NQ7VYjDOVuk27pZKhTff/4ql464cX39mZrzPoMKTxKss/fT2nZnz2qO99bCPE6F1EpuFxUCV2FLO9xkbtAOL4XNMtvNoG8fCjhOraXNxfLxZkRPXoFcLS8oZrHMi7FvVwMVQagoNXXLi6CptagYKSpg6LlHoVlCKVDTxDHNmwbfCqs89g1T6s0KPNWtifbTrMmp73lGavQPdg==; 20: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
X-Microsoft-Antispam-PRVS: <DM2PR0501MB1343D6AD684F231CB999B5D2C9A10@DM2PR0501MB1343.namprd05.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040176)(601004)(2401047)(13023025)(13017025)(13015025)(5005006)(13024025)(8121501046)(13018025)(3002001)(10201501046)(6055026); SRVR:DM2PR0501MB1343; BCL:0; PCL:0; RULEID:; SRVR:DM2PR0501MB1343;
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 4: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
X-Forefront-PRVS: 01136D2D90
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 23: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
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 6:YlsZN9ikCiHg7N42qsd6JHzIbBE3LbhjMPRUUHa34YJGu4f8lfiEztPd9Qbm5SoVQx6B1bYP4RbTeT9Z8j46aDpIZ1fFGRcnPfBgwyxg4dbQLyf0RyrUy2sFiCHPkIS4kc2uzZYT5g9ZWigbYkt3iQ3ydUvum7kOckHvND5mvQut+Lxio9HtjRfGC3I4f0AY33eJr+1jDrudYNd56YBg/skwQdIjg2BuqPcq6xIIdZDoAWWoy7ImO6PGb0VO0DMgqT3zlCM7r5/YqWgQh/7Egs+MsYKIGSOxPSmrbmDFBWo7LxEKFx7zTNRr78C5WsyLcPOIFZYnKYcu7Arvryi+fSo/8UFllHpcM9cF7OTG4LQ=; 5:VgKTWt44jh/sJmgubwMkrdbwn28s9gOI58rBDzh1S1HyDy6ptORnaYoVLTaKpuRuloDK1yv1rc4U3ksFbTmGThe1qd0uskieSWHqq6tHBXgnCwpuymahsdb/SaPzIX5C/dRD+LoXqR+3L0q06DzwWg==; 24:25Jf54dqPw+FxR3MqHJeBvdPJ5crJwrjb+XoPXmQMYg6fijr+XUgZ++2slcc57lWYhZf1YfAYs54JktyydHveZPg6DogY4NAMlAP7fwlxJc=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; DM2PR0501MB1343; 7:i7qA8oLCbpH3ItfSGdyWIgKLseam/0CK+/9ZyVJbaVs3yXwRoMAIJbwnf2kuuwEe1Pvihy6QoVIkGK8eOfOa8ZyQy8zcUunLeBHl+PBSw/0wVGpddpT96vIMcolYjZX19IvxTs2DPZp0C+HBwKy0g+uWhaVFB2yf4ilC1rbMmghHwMfab/P9kqOnSO/sIgYXG8siWdpj9aBgXC5g98tni1Is+1GYhoC+GCeSwlGYcqSkD6LKjv2GbeLOs6+qKJWSPyRH5Vd+6fO6Emo5hWGqi3x2hsJFklcJOWrLg2zoVH3dBJaguvD9PPIGut/t2iPhlp/8fX1l4qL/T59hAwW0Baieb8DyYuiAmK0niPz40Pg=
X-OriginatorOrg: juniper.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Nov 2016 00:49:11.5488 (UTC)
X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.19]; Helo=[P-EMFE01C-SAC.jnpr.net]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR0501MB1343
Archived-At: <https://mailarchive.ietf.org/arch/msg/netmod/RNwrRBVTsZZy2yoJufoa_n5DBmM>
Subject: Re: [netmod] I-D Action: draft-ietf-netmod-syslog-model-10.txt
X-BeenThere: netmod@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: NETMOD WG list <netmod.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/netmod>, <mailto:netmod-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/netmod/>
List-Post: <mailto:netmod@ietf.org>
List-Help: <mailto:netmod-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/netmod>, <mailto:netmod-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 01 Nov 2016 00:49:18 -0000

>        Title           : A YANG Data Model for Syslog Configuration

I've a few questions:

- The description says that the "facility/no-facility" case/leaf
is used "o effectively disable a particular log-action".  Why not
make an explicit "disable" leaf instead?  Using no-facilities like
this is confusing.

- Why use an explicit/mandatory selector node instead of making
this implicit, with the lack of a selector meaning match all?

- compare-op: we've always tried to use full words; would this be
better as "compare-operation" or just "compare"?

- equals-or-higher: you might want to explain that this is the
default even in the absence of the "select-sev-compare" feature.
(I'm assuming this is true.)

- You use "facility" as both a case and a list under selector-facility.
This seems confusing and misleading.

- "structured-data": says "describes how log messages are written
to the log file" but it applies to more than log files.

- Consider making "syslog-sign" into "signing-options" or something
similar, to be more clear.  The "syslog-" prefix is not needed,
since the reader knows we are talking about syslog, and the "sign"
is not clear.  Then you can remove the "sig-" prefix on the child
nodes.

- The "session" name is not clear, since there are many sort of
sessions; would "local-users" be better?

- What purpose for the "actions" container serve?  Can it be removed?

- "buffer" should be a feature, since many platforms do not implement it.

- How does an implementation specify the set of valid characters usable
for user names?

- Many networking devices have special tags at the front of their
messages, indicating the specific message.  For example "%ASA-1-104001"
in IOS, or "BGP_CEASE_PREFIX_LIMIT_EXCEEDED" in JUNOS.  We carry
these are specific SD-PARAMS when SD is used.  Is there a way to
filter using theses tags, or more generic SD-PARAMS?

Thanks,
 Phil