Syslog Plugin help -Solved-

[bryancromwell]

I have installed the syslog 1.05 plugin. It appears I am getting some local syslog events but nothing from the remote systems.

Cacti 2010-10-01 22:35:01 (root) CMD (/usr/bin/php /var/www/html/poller.php > /dev/null 2>&1) 9 6
Cacti 2010-10-01 22:30:01 (root) CMD (/usr/bin/php /var/www/html/poller.php > /dev/null 2>&1) 9 6
Cacti 2010-10-01 22:27:44 [origin software="rsyslogd" swVersion="3.22.1" x-pid="12636" x-info="http:... 5 6
Cacti 2010-10-01 22:27:44 WARNING: rsyslogd is running in compatibility mode. Automatically generated... 5
Cacti 2010-10-01 22:27:44 Warning: backward compatibility layer added to following directive to rsysl... 5 3

I have done tcpdumps to make sure the syslogs are making it to the cacti box and have configured the rsyslog.conf

$ModLoad ommysql
$template cacti_syslog,"INSERT INTO syslog_incoming(facility, priority, date, time, host, message) values (%syslogfacility%, %syslogpriority%, '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%HOSTNAME%', '%msg%')", SQL
*.* >127.0.0.1,cacti,cacti,cactipassword;cacti_syslog

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

Any Idea's??

[joseme]

Hi:
If you use rsyslog, to get from others equipment:
edit file /etc/sysconfig/rsyslog:

SYSLOGD_OPTIONS="-m 0 -r514"

It would be better to restart the rsyslogd daemon.
I hope this help you
Jose

[bryancromwell]

Thanks, I had actually just fixed it about 10 minutes before your post by adding:

$ModLoad imudp
$UDPServerAddress 192.168.1.5 # this MUST be before the $UDPServerRun directive!
$UDPServerRun 514

I assumed (You know what they say about assumptions) that the listener would have been running by default.

Not sure who manages syslog plugin but it might be a nice note to add to the install documentation.