HOW can i get Syslog to work on CactiEZ?

[ram1101]

I been trying to get this going, i just have a brand new installation now of 8.8a, so id like to get the syslog going.
i have just a regular setup havent make any changes be side activatng the syslog, but i dont see anything coming to it,
can any one help me and let me know what else i need to do on CactiEZ v0.7v

[gandalf]

Usinbg the syslog plugin requires additional changes outside of cacti. AFAIK, the syslog plugin currently supports two different syslogging solutions and the tweaks required are specific to those, respectively. See more at the documentation for syslog plugin.
R.

[ram1101]

Im getting logs locally but some how i cant recived from another host, not sure if 514 is listing,
everything seems to be setup accroding to the syslog plug in documentation, i see that you are a wiz at this and i really need your help at this time

[gandalf]

Indeed, I'm NOT an expert of syslog plugin. I only installed it once. But let's have a go. Do you use syslog-ng or rsyslog (or which were the names of the tools involved)
R.

[ram1101]

not sure but i think is syslog 1.22 the cacti ez distro is supposed to work out of the box,
if you send me a personal mesage i can send you credentials to you can take a look and help me get it going,
i decided to start all over but still the syslog is not working but the graphs are

[ram1101]

I just install rsyslog

[ram1101]

this is what I get when I see the logging on the server
the last error occured in /etc/rsyslog.conf, line 14:"$UDPServerRun 514"
rsyslog file below
****************************************************************************************
# rsyslog v5 configuration file

# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
# If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html

#### MODULES ####

$ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
#$ModLoad immark # provides --MARK-- message capability

# Provides UDP syslog reception
#$ModLoad imudp
$UDPServerRun 514

# Provides TCP syslog reception
#$ModLoad imtcp
$InputTCPServerRun 514


#### GLOBAL DIRECTIVES ####

# Use default timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# File syncing capability is disabled by default. This feature is usually not required,
# not useful and an extreme performance hit
#$ActionFileEnableSync on

# Include all config files in /etc/rsyslog.d/
$IncludeConfig /etc/rsyslog.d/*.conf


#### RULES ####

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages

# The authpriv file has restricted access.
authpriv.* /var/log/secure

# Log all the mail messages in one place.
mail.* -/var/log/maillog


# Log cron stuff
cron.* /var/log/cron

# Everybody gets emergency messages
*.emerg *

# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler

# Save boot messages also to boot.log
local7.* /var/log/boot.log


# ### begin forwarding rule ###
# The statement between the begin ... end define a SINGLE forwarding
# rule. They belong together, do NOT split them. If you create multiple
# forwarding rules, duplicate the whole block!
# Remote Logging (we use TCP for reliable delivery)
#
# An on-disk queue is created for this action. If the remote host is
# down, messages are spooled to disk and sent when it is up again.
#$WorkDirectory /var/lib/rsyslog # where to place spool files
#$ActionQueueFileName fwdRule1 # unique name prefix for spool files
#$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
#$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
#$ActionQueueType LinkedList # run asynchronously
#$ActionResumeRetryCount -1 # infinite retries if host is down
# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
#*.* @@10.1.2.211:514
# ### end of the forwarding rule ###

$ModLoad ommysql
$template cacti_syslog,"INSERT INTO syslog_incoming(facility, priority, date, time, host, message) values (%syslogfacility%, %syslogpriority%, '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%HOSTNAME%', '%msg%')", SQL
*.* >127.0.0.1,syslog,cactiuser,+KddovXq;cacti_syslog

# A template to for higher precision timestamps + severity logging
$template SpiceTmpl,"%TIMESTAMP%.%TIMESTAMP:::date-subseconds% %syslogtag% %syslogseverity-text%:%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"

:programname, startswith, "spice-vdagent" /var/log/spice-vdagent.log;SpiceTmpl

[ram1101]

anyone?

[gurulee]

anyone?