Syslog monitor addon beta

[spoonman]

Thanks.....will take a look. Think I'll wait...I did see some modified code. I'll check it out.

[JJX]

nice plugin

I have a small (?) question:
I am using syslog 0.4 plugin.
I use syslog-ng to concentrate my logs and i save evetything in mysql.
Database name is "syslog". New rows are saved in "syslog_incoming".

Here are 3 rows:

mysql> select * from syslog_incoming;
+----------+----------+------------+----------+---------------+---------------------------------------------------------------------------+-----+--------+
| facility | priority | date | time | host | message | seq | status |
+----------+----------+------------+----------+---------------+---------------------------------------------------------------------------+-----+--------+
| syslog | notice | 2006-05-20 | 03:42:32 | skilla | syslog-ng[7512]: syslog-ng starting up; version='1.X.X' | 1 | 2 |
| user | notice | 2006-05-20 | 03:52:16 | XX.XX.XXX.XXX10.19.146.161 | system,info,account user test logged in from XX.XX.XXX.XXX via winbox | 2 | 0 |
| user | notice | 2006-05-20 | 03:52:21 | XX.XX.XXX.XXX | system,info,account user test logged out from XX.XX.XXX.XXX via winbox | 3 | 0 |
+----------+----------+------------+----------+---------------+---------------------------------------------------------------------------+-----+--------+
3 rows in set (0.00 sec)

Howerver, when i select syslog tab i get no entries or hosts
Am i saving the entries in wrong table?
Did i forgot to configure something?

[JJX]

When i woke up today everything worked , with a last problem:
I see only the first lines of logs. syslog_incoming has 150 lines but they are not moving into syslog table so they can appear

Any idea why?

[JJX]

Any idea why not all messages arent moving from syslog_incoming to syslog?

[JJX]

Also in "haloe.txt" i see some instructions fom manually editing some files.
These instruction apply to version 0.4 with plugins architecture?

[JJX]

As i can see table 'syslog.settings' isnt created or initialized anywhere in the syslog.sql or in any php file.

Is there a mistake in syslog.sql file or i am doing something wrong?

[fitzgerald]

I am missing something-----
I copied the files from the Zip as instructed, but now I get "page cannot be displayed" I get nothin, nada, zip. The whole Cacti installation is broken now, Did I missunderstand that, is there some installation guide for this add-on I really want to use it but not at the cost of my entire cacti install....

[nahun]

I am missing something-----
I copied the files from the Zip as instructed, but now I get "page cannot be displayed" I get nothin, nada, zip. The whole Cacti installation is broken now, Did I missunderstand that, is there some installation guide for this add-on I really want to use it but not at the cost of my entire cacti install....

I'm guessing you've installed the plugin arch and have used plugins before? Did you unzip it in the plugins directory and then edit cacti's config.php for the plugin? Also did you add the sql tables to your mysql database? I've been meaning to write a how-to, but work is killing me

[tiggermanh]

I am running Cacti 8h on a Suse linux kernel 2.6 box with PHP 4.4.0, Apache2 and MySql 4.1.13.

It has been running extremely well, with several other plugins.

Today, I installed syslog-ng and the haloe plugin.

I have the syslog data coming into mysql and at the polling intervals, cacti is moving it from syslog_incoming to syslog.

The problem I have is with viewing the plugin. I edited my php.ini and changed my memory limit to 32 MB.

I get the following:

Warning: main(plugins/haloe/config.php): failed to open stream: No such file or directory in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 31

Warning: main(): Failed opening 'plugins/haloe/config.php' for inclusion (include_path='/usr/share/php') in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 31

Warning: main(plugins/haloe/functions.php): failed to open stream: No such file or directory in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 32

Warning: main(): Failed opening 'plugins/haloe/functions.php' for inclusion (include_path='/usr/share/php') in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 32

Notice: Undefined variable: haloe_config in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 67

Notice: Undefined variable: haloe_config in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 91

Warning: main(plugins/haloe/html/haloe_timespan_settings.php): failed to open stream: No such file or directory in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 91

Warning: main(): Failed opening 'plugins/haloe/html/haloe_timespan_settings.php' for inclusion (include_path='/usr/share/php') in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 91

Notice: Undefined variable: haloe_config in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 121

Notice: Undefined variable: haloe_config in /srv/www/htdocs/cacti/plugins/haloe/haloe.php on line 128


I checked all permissions on the files and made sure they were RW by the apache user. I attempted to edit the files and use full paths to the plugins, but that didnt help.

The paths that are listed in the error are correct, and the files DO exist in those locations.

I appreciate any feedback or points on what to change next.

[tiggermanh]

I figured it out.

I edited my php.ini file and updated my include_path line from:

include_path = "/usr/share/php"

to

include_path =".:/usr/share/php"

The . means current directory. This allows the PHP scripts to include the local directory the scripts were in.

[pconrad]

Has anyone set this up with MS SQL server instead of MYSQL?

[ehall]

Data is getting into syslog_incoming and syslog fine. The syslog tab even shows the host, the facilities and so forth in the drop down boxes. However, there are no messages...

Code: Select all

$ mysql -u cacti -p syslog
mysql> select * from syslog_incoming;
| facility | priority | date       | time     | host    | message    | seq | status |
[...]
5 rows in set (0.00 sec)

mysql> select * from syslog;
| facility | priority | date       | time     | host    | message    | seq |
[...]
52 rows in set (0.00 sec)

...and some of the data shows up in the dynamic widgets:

... but as you can see, there's no message data.

the message data is in the syslog tables though, I can see it.

I'm officially flummoxed.

[adrianmarsh]

ehall,

What are the timestamps of the entries in the database? From your s/shot I see you've set it to last 1/2 hour. Is it possible that you simply don't have any entries for that period to show ?

[ehall]

The default view of Last Day doesn't show anything either. None of them do.

I think the problem is the timestamps

Code: Select all

mysql> mysql> select * from syslog;
+----------+----------+------------+----------+---------+----------------------------------------------------------+---------+
| facility | priority | date       | time     | host    | message                                                  | seq     |
+----------+----------+------------+----------+---------+----------------------------------------------------------+---------+
| daemon   | info     | 0000-00-00 | 00:00:00 | bulldog | named[6678]: unexpected RCODE (SERVFAIL) resolving [...] | 1799499 |
| cron     | info     | 0000-00-00 | 00:00:00 | bulldog | /usr/sbin/cron[16649]: (root) CMD (php /var/lib/cac[...] | 1799498 |

I guess I need to investigate the syslog-ng syntax

edit: that fixed it

working woot

[nahun]

Has anyone set this up with MS SQL server instead of MYSQL?

Cacti only works with MySQL, and this plugin is made around that. I'm sure you can get it to work with MS SQL, but it would be a ton of work.