Syslog 1.22 Possible Bugs...

[ikorzha758]

Guys I have recently started using syslog 1.22 and I have identified what seems to me a 3 bugs:

On PIC 1: On Critical alerts only text wraps up, up to 3 lines even there is space to show everything in single line....
On PIC 3: Please notice that Priority is warning bug "alert color" is grey instead of yellow.
On PIC 2: When warning priority is selected for all host or specific host, there are no msgs that are showing even though there are msgs with priority level warning for the device in the database as per attached PIC 3.




Additionally I would like to point out that any changes to section: All Facilities; All Prioroties; Main Records; Columns; # on Characters and Refresh Interval results in Presets change to Custom. Such behavior is annoying to an end user since the time selections needs to be reapplied everytime the change to above is made. Is there a way to make "Custom" Selection manual instead of automatic? It would help a lot.

[TheWitness]

Issue #1 is not a bug. You have set to only view 100 Characters of the message. Increase that and you will get more of the message upto 1024 bytes.

Issue #3 is likely due to a configuration change. You should dump the contents of the following table like so:

Code: Select all

mysql> select * from syslog_priorities;
+-------------+----------+---------------------+
| priority_id | priority | last_updated        |
+-------------+----------+---------------------+
|           1 | emerg    | 2011-11-27 20:25:33 |
|           2 | crit     | 2011-05-08 22:55:58 |
|           3 | alert    | 2011-05-08 22:55:58 |
|           4 | err      | 2011-05-26 20:00:31 |
|           5 | warn     | 2011-05-08 22:55:58 |
|           6 | notice   | 2011-11-29 06:30:34 |
|           7 | info     | 2011-11-29 13:25:30 |
|           8 | debug    | 2011-05-08 22:55:58 |
|           9 | other    | 2011-05-08 22:55:58 |
|          10 | warning  | 2011-10-18 19:20:33 |
+-------------+----------+---------------------+
10 rows in set (0.00 sec)

When I did mine, I found a 'new' priority level called 'warning', which should have been 'warn'. I'm thinking mybe (in my case syslog-ng changed the description from 'warn' to 'warning'... Great..

This would explain Item #3 as well.

Which Syslog to MySQL tool are you using?

TheWitness

[ikorzha758]

Just like in your case I do use syslog-ng to MySQL.. So if that is the case what is the solution to get a proper warning alerts? (I hope you not going to say rsyslog because I couldn't get it to work)....

When it comes to Issue #1 I tried to change it to 300chars which is the MAX in syslog and it still wraps to second/third line and it only wraps the critical alerts... Correction: Only events reported by MANAGE Plugin to SYSLOG wraps to 3 lines..... Is there a way to correct it? Please see attached example.


Also I would like to ask you if the "custom" feature works as designed since to me as an end user it seems awkward as described in previous post?

[racingbg]

Additionally I would like to point out that any changes to section: All Facilities; All Prioroties; Main Records; Columns; # on Characters and Refresh Interval results in Presets change to Custom. Such behavior is annoying to an end user since the time selections needs to be reapplied everytime the change to above is made. Is there a way to make "Custom" Selection manual instead of automatic? It would help a lot.

I am also curious about that. Is there way to change the default preset? Every time when a new host is filtered, the preset is changed to "Custom" with no time ranges. Is it possible to set it to "Last Day" range for example? It would be nice... I spent some time digging the code in "syslog.php" but I was unable to figure out how to fix this.

Everything else is OK. Many thanks!

[TheWitness]

Right now the time spans and the presets are preset and not configurable. Please update timespan_settings.php dot to resolve the other issue.

[racingbg]

Right now the time spans and the presets are preset and not configurable. Please update timespan_settings.php dot to resolve the other issue.

Sorry for the stupid question but how can I find it? I can't see "timespan_settings.php" in syslog plugin directory.

[TheWitness]

No, cacti lib directory

[racingbg]

OK, here is what I did in order to fix the "custom timeshift" issue. I copied "timespan_settings.php" from cacti-0.8.7g in my newer installation (0.8.7h). Maybe it's not the best solution but it works.

[TheWitness]

Thats fine.

[ikorzha758]

Excellent fix for default preset. Thanks. If I could only now get the warning alerts to work properly with syslog-ng it would be an absolute perfection

[ikorzha758]

The Witness, thank you so much for the "warning" fix. I will test it on monday once at work...