syslog issue

sharekhan · Post by **sharekhan** » Wed May 23, 2012 4:43 am

Sir

i am not getting the data in syslog , below are the details for your reference.

Syslog 1.22

[nms ~]# php -q /var/www/html/cacti/plugins/syslog/syslog_process.php --debug
SYSLOG: Syslog Table is NOT Partitioned
SYSLOG: Deleted 0, Syslog Message(s) (older than 2012-04-23)
SYSLOG: Unique ID = 4
SYSLOG: Found 0, New Message(s) to process
SYSLOG: Stats 0, Record(s) to the 'syslog_statistics' table
SYSLOG: Found 0, Removal Rule(s) to process
SYSLOG: Found 0, Alert Rules to process
SYSLOG: Moved 0, Message(s) to the 'syslog' table
SYSLOG: Deleted 0, Already Processed Message(s) from incoming
SYSLOG: Deleted 0, Syslog Statistics Record(s)
SYSLOG: Deleted 0, Syslog alarm log Record(s)
SYSLOG: Processing Reports...
SYSLOG: We have 0 Reports in the database
SYSLOG: Finished processing Reports...
05/23/2012 04:21:20 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0

***********
Cacti LOG
***********

05/23/2012 04:22:52 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:52 PM - SYSTEM STATS: Time:0.1813 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:22:42 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:42 PM - SYSTEM STATS: Time:0.1875 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:22:32 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:32 PM - SYSTEM STATS: Time:0.1814 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:22:22 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:22 PM - SYSTEM STATS: Time:0.1823 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:22:12 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:12 PM - SYSTEM STATS: Time:0.1865 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:22:02 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:22:02 PM - SYSTEM STATS: Time:0.1894 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:52 PM - SYSTEM SYSLOG STATS:Time:0.1 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:52 PM - SYSTEM STATS: Time:0.1875 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:42 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:42 PM - SYSTEM STATS: Time:0.1792 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:32 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:32 PM - SYSTEM STATS: Time:0.1854 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:22 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:22 PM - SYSTEM STATS: Time:0.1823 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:20 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:12 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:12 PM - SYSTEM STATS: Time:0.1824 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:21:02 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:21:02 PM - SYSTEM STATS: Time:0.1854 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:20:52 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:20:52 PM - SYSTEM STATS: Time:0.1835 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:1 RRDsProcessed:0
05/23/2012 04:20:50 PM - SYSTEM SYSLOG STATS:Time:0.09 Deletes:0 Incoming:0 Removes:0 XFers:0 Alerts:0 Alarms:0 Reports:0
05/23/2012 04:20:50 PM - SYSTEM STATS: Time:0.1084 Method:cmd.php Processes:1 Threads:N/A Hosts:2 HostsPerProcess:2 DataSources:0 RRDsProcessed:0

sharekhan · Post by **sharekhan** » Thu May 24, 2012 8:40 am

Sir pls help

Post by **gandalf** » Thu May 24, 2012 2:21 pm

Plugin related, moving
R.

MrRat · Post by **MrRat** » Thu May 24, 2012 2:37 pm

Do you have your syslog server setup to pipe to mysql?

sharekhan · Post by **sharekhan** » Fri May 25, 2012 1:05 am

MrRat · Post by **MrRat** » Fri May 25, 2012 7:28 am

you have to setup the syslog server to pipe the data into mysql.

http://docs.cacti.net/plugin:syslog.config

MrRat · Post by **MrRat** » Fri May 25, 2012 7:40 am

I use syslog-ng and a seperate database for syslog but isnt all that different from using rsyslog, here is what I did.
In syslog-ng.conf I have

Code: Select all

source net { udp (); };
log { source (src); source(net); destination(net_logs); destination(d_mysql); };

and

Code: Select all

destination d_mysql {
    pipe("/tmp/mysql.pipe"
    template("INSERT INTO syslog_incoming (host, facility, priority, date, time, message) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$MSG' );\n")
    template-escape(yes)
     );
};

Then I have the syslogtomysql script created

Code: Select all

#!/bin/bash
if [ ! -e /tmp/mysql.pipe ]; then
        mkfifo /tmp/mysql.pipe
fi

while [ -e /tmp/mysql.pipe ]
do
        mysql -u cactiuser -pcactiuser syslog < /tmp/mysql.pipe
done

Then I modified the syslog-ng init script to start and stop syslogtomysql also

Code: Select all

start() {
        checkconfig || return 1
        ebegin "Starting ${SVCNAME}"
        [ -n "${SYSLOG_NG_OPTS}" ] && SYSLOG_NG_OPTS="-- ${SYSLOG_NG_OPTS}"
        start-stop-daemon --start --pidfile "${SYSLOG_NG_PIDFILE}" --exec /usr/sbin/syslog-ng ${SYSLOG_NG_OPTS}; /usr/local/bin/syslogtomysql &
        eend $? "Failed to start ${SVCNAME}"
}

stop() {
        ebegin "Stopping ${SVCNAME}"
        start-stop-daemon --stop --pidfile "${SYSLOG_NG_PIDFILE}"; killall -9 syslogtomysql > /dev/null;rm /tmp/mysql.pipe
        eend $? "Failed to stop ${SVCNAME}"
        sleep 1 # needed for syslog-ng to stop in case we're restarting
}

XTech · Post by **XTech** » Sat May 26, 2012 9:36 pm

This syslog-ng.conf just works with separate cacti syslog database named "cactilog" and without syslogtomysql:

Code: Select all

options {
        long_hostnames(off);
        use_fqdn(on);
        flush_lines(0);
};

source s_local {
        unix-dgram("/dev/log");
        file("/proc/kmsg" log_prefix("kernel:"));
};

source s_remote {
        tcp(ip(0.0.0.0) port(514));
        udp(ip(0.0.0.0) port(514));
};

filter f_messages { level(info..emerg); };

destination d_cacti_sql {
        sql(type(mysql)
        host("localhost")
        username("syslog")
        password("password")
        database("cactilog")
        table("syslog_incoming")
        columns("facility","priority","date","time","host","message")
        values("$FACILITY","$LEVEL","$YEAR-$MONTH-$DAY","$HOUR:$MIN:$SEC","$HOST","$MSGONLY")
        indexes("facility","level")
        );
};

log { source(s_local); source(s_remote); filter(f_messages); destination(d_sql); destination(d_cacti_sql); };

Cacti

syslog issue

syslog issue

Re: syslog issue

Re: syslog issue

Re: syslog issue

Re: syslog issue

Re: syslog issue

Re: syslog issue

Re: syslog issue

Who is online