Syslog Plugin - How does it work?

[smunzani]

Hi,

I am totally new to Cacti and plugins. Got Cacti on Ubuntu up and running. Now need to get syslog plugin. Install PA, settings and syslog plugin. I chose to store syslog in cacti DB tables to keep it simply.

Questions:
1. The documentation for the syslog plugin has example of syslog forward to central server. In this case, I have Cacti and syslog-ng both on the same box. Do I need to have following line in my config? It doesn't make sense. Syslog-ng receives the log on UDP socket and then forwards to the host it self on UDP/514 again?

destination cacti_syslog { udp("192.168.0.111" port(514)); };

2. In order to use tables created by Cacti, how do I configure syslog-ng? OR do I have to use rsyslog? In either case, any config examples?

3. Once all logs show up in the Cacti, all the alerting rules would be done within Cacti or anything needs to be done with rsyslog or syslog-ng?

Thanks in advance,