All,
I have the syslog plugin installed correctly but all hosts show up as "Feb" in the hostname.
This is what an entry in syslog_incoming table looks like:
| 20 | 4 | 2012-02-29 | 11:55:10 | Feb | 2012 06:55:10: %ASA-4-419002: Duplicate TCP SYN from outside:1.2.3.4/2763 to inside:5.6.7.8/5081 with different initial sequence number
This is the rsyslog config:
$template cacti_syslog,"INSERT INTO syslog_incoming(facility, priority, date, time, host, message) values ('%syslogfacility%', '%syslogpriority%', '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%HOSTNAME%', '%msg%')", SQL
Anything that's obviously wrong here?
As a sidenote, I also don't get the color coding - facility and priority show up as numbers...
Thanks for any help,
Philip
problem with syslog plugin: hosts displayed incorrectly
Moderators: Developers, Moderators
Re: problem with syslog plugin: hosts displayed incorrectly
Maybe this is useful for others:
I had to disable 'logging timestamp' on the Cisco ASA's to get the host displayed properly. Otherwise it would not insert the proper items into the MySQL database.
As far as the color codes go, I had to add "-text" to syslogfacility and syslogpriority.
Kind regards,
Philip
I had to disable 'logging timestamp' on the Cisco ASA's to get the host displayed properly. Otherwise it would not insert the proper items into the MySQL database.
As far as the color codes go, I had to add "-text" to syslogfacility and syslogpriority.
Kind regards,
Philip
Who is online
Users browsing this forum: No registered users and 2 guests