I have a Windows server with Cacti 0.8.8a and Syslog plugin. I have another server in the same subnet running Ubuntu server where i installed Rsyslog and Rsyslog-Mysql.
A mysql database called Syslog in the ubuntu server is storing all the logs, i already check that.
So here is where i dont know how to continue:
Can i send all the data in the ubuntu rsyslog to my mysql cacti database using this in /var/rsyslog.conf (in the ubuntu server)
$ModLoad ommysql
$template cacti_syslog,"INSERT INTO syslog_incoming(facility, priority, date, time, host, message) values (%syslogfacility%, %syslogpriority%, '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%HOSTNAME%', '%msg%')", SQL
*.* >{mysql_server},{db_name},{db_users},{db_pass};cacti_syslog
where mysql_server is the Windows server w/cacti-syslogplugin and db_name is the table that syslog plugin create
OR
it is syslog plugin who is looking for the table in rsyslog server and i have to configure it on plugins/syslog/config.php ???
am i having it right ?? or im completely wrong and lost ??
Hope someone can help me or just carify this a bit
Thanks
PD : sorry for my confusing english.