problem with syslog plugin: hosts displayed incorrectly

General discussion about Plugins for Cacti

Moderators: Developers, Moderators

Post Reply
philipz
Cacti User
Posts: 100
Joined: Tue Sep 22, 2009 7:46 am

problem with syslog plugin: hosts displayed incorrectly

Post by philipz »

All,

I have the syslog plugin installed correctly but all hosts show up as "Feb" in the hostname.
This is what an entry in syslog_incoming table looks like:
| 20 | 4 | 2012-02-29 | 11:55:10 | Feb | 2012 06:55:10: %ASA-4-419002: Duplicate TCP SYN from outside:1.2.3.4/2763 to inside:5.6.7.8/5081 with different initial sequence number

This is the rsyslog config:
$template cacti_syslog,"INSERT INTO syslog_incoming(facility, priority, date, time, host, message) values ('%syslogfacility%', '%syslogpriority%', '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%HOSTNAME%', '%msg%')", SQL

Anything that's obviously wrong here?
As a sidenote, I also don't get the color coding - facility and priority show up as numbers...

Thanks for any help,

Philip
philipz
Cacti User
Posts: 100
Joined: Tue Sep 22, 2009 7:46 am

Re: problem with syslog plugin: hosts displayed incorrectly

Post by philipz »

Maybe this is useful for others:
I had to disable 'logging timestamp' on the Cisco ASA's to get the host displayed properly. Otherwise it would not insert the proper items into the MySQL database.

As far as the color codes go, I had to add "-text" to syslogfacility and syslogpriority.

Kind regards,

Philip
Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests