From gneamob at yahoo.com Sat May 14 04:03:24 2005 From: gneamob at yahoo.com (Scott) Date: Fri, 13 May 2005 19:03:24 -0700 (PDT) Subject: [rsyslog] Test Message-ID: <20050514020325.96683.qmail@web54307.mail.yahoo.com> This is a test to make sure that I can actually post since it looks like no one else has. -S Discover Yahoo! Find restaurants, movies, travel and more fun for the weekend. Check it out! http://discover.yahoo.com/weekend.html From dennisolvany at gmail.com Mon May 30 12:14:42 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 05:14:42 -0500 Subject: [rsyslog] freebsd Message-ID: <000801c56500$7fcc54b0$0366a8c0@d> I am highly interested in sql logging and I'm glad to see that there is an active project supporting it. I am having trouble compiling this on a freebsd system. Do I need to enable linux binary compatibility? Are there rudimentary instructions for compiling on freebsd. If I could get it working, I would gladly write a doc on freebsd implementation. From rgerhards at hq.adiscon.com Mon May 30 12:16:59 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 12:16:59 +0200 Subject: [rsyslog] freebsd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> hi, please let me know which issues you have on freebsd. I think I compiled it successfully on freebsd, maybe I overlooked something. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 12:15 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] freebsd > > I am highly interested in sql logging and I'm glad to see > that there is an active project supporting it. I am having > trouble compiling this on a freebsd system. Do I need to > enable linux binary compatibility? Are there rudimentary > instructions for compiling on freebsd. If I could get it > working, I would gladly write a doc on freebsd implementation. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 13:59:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 06:59:20 -0500 Subject: [rsyslog] freebsd References: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> Message-ID: <000901c5650f$172a7360$0366a8c0@d> Thanks for responding. I was trying to compile 083 on freebsd. Got 084 and it compiled fine. Doesn't seem to be logging to the mysql server though. Fresh freebsd5.4 install, mysql41-client, rsyslog-084. Do I disable syslogd? Any other required software? I have no idea how to troubleshoot this. Connect to mysql server just fine with mysql client. /etc/rsyslog.conf Commented all but: *.* >mysql.carcass.us,syslog,syslog,syslog I have no idea how to start it at boot. Not a bsd expert....yet. postfix# find / -name "rsyslog*" /usr/sbin/rsyslogd /usr/share/man/cat5/rsyslog.conf.5.gz /usr/share/man/cat8/rsyslogd.8.gz /usr/share/man/man5/rsyslog.conf.5 /usr/share/man/man8/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4.tar.tar /usr/home/dennisolvany/rsyslog-0.8.4 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslog.conf.5 /var/run/rsyslogd.pid /etc/rsyslog.conf postfix# help much appreciated From dennisolvany at gmail.com Mon May 30 14:06:13 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:06:13 -0500 Subject: [rsyslog] freebsd Message-ID: <001001c5650f$fa0b8160$0366a8c0@d> doh...didn't compile with db support From dennisolvany at gmail.com Mon May 30 14:16:02 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:16:02 -0500 Subject: [rsyslog] now compile prob Message-ID: <001a01c56511$6dabc430$0366a8c0@d> postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c syslogd.c:593:26: mysql/mysql.h: No such file or directory syslogd.c:594:26: mysql/errmsg.h: No such file or directory syslogd.c:825: error: syntax error before "MYSQL" syslogd.c: In function `initMySQL': syslogd.c:4928: warning: implicit declaration of function `mysql_init' syslogd.c:4928: error: structure has no member named `f_hmysql' syslogd.c:4932: warning: implicit declaration of function `mysql_real_connect' syslogd.c:4932: error: structure has no member named `f_hmysql' syslogd.c:4943: warning: implicit declaration of function `mysql_errno' syslogd.c:4943: error: structure has no member named `f_hmysql' syslogd.c: In function `closeMySQL': syslogd.c:4955: warning: implicit declaration of function `mysql_close' syslogd.c:4955: error: structure has no member named `f_hmysql' syslogd.c: In function `writeMySQL': syslogd.c:5000: warning: implicit declaration of function `mysql_query' syslogd.c:5000: error: structure has no member named `f_hmysql' syslogd.c:5010: error: structure has no member named `f_hmysql' syslogd.c: In function `DBErrorHandler': syslogd.c:5045: error: structure has no member named `f_hmysql' syslogd.c:5046: warning: implicit declaration of function `mysql_error' syslogd.c:5046: error: structure has no member named `f_hmysql' syslogd.c:5049: error: structure has no member named `f_hmysql' *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:20:54 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:20:54 +0200 Subject: [rsyslog] now compile prob Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A1@grfint2.intern.adiscon.com> oops... looks like I didn't compile with DB support. shame on me ;) I guess it's just a path issue, but I unfortunaltey can not verify right at this moment. Please do a search for mysql.h and correct the pathes according to what you find. Let me know if that works (and if so, where you found it ;)). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:16 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] now compile prob > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > syslogd.c:593:26: mysql/mysql.h: No such file or directory > syslogd.c:594:26: mysql/errmsg.h: No such file or directory > syslogd.c:825: error: syntax error before "MYSQL" > syslogd.c: In function `initMySQL': > syslogd.c:4928: warning: implicit declaration of function `mysql_init' > syslogd.c:4928: error: structure has no member named `f_hmysql' > syslogd.c:4932: warning: implicit declaration of function > `mysql_real_connect' > syslogd.c:4932: error: structure has no member named `f_hmysql' > syslogd.c:4943: warning: implicit declaration of function > `mysql_errno' > syslogd.c:4943: error: structure has no member named `f_hmysql' > syslogd.c: In function `closeMySQL': > syslogd.c:4955: warning: implicit declaration of function > `mysql_close' > syslogd.c:4955: error: structure has no member named `f_hmysql' > syslogd.c: In function `writeMySQL': > syslogd.c:5000: warning: implicit declaration of function > `mysql_query' > syslogd.c:5000: error: structure has no member named `f_hmysql' > syslogd.c:5010: error: structure has no member named `f_hmysql' > syslogd.c: In function `DBErrorHandler': > syslogd.c:5045: error: structure has no member named `f_hmysql' > syslogd.c:5046: warning: implicit declaration of function > `mysql_error' > syslogd.c:5046: error: structure has no member named `f_hmysql' > syslogd.c:5049: error: structure has no member named `f_hmysql' > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:38:57 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:38:57 -0500 Subject: [rsyslog] fixed paths more probs Message-ID: <002501c56514$9fc36060$0366a8c0@d> The original paths were relative, but I don't know what they what they were supposed to be relative to, so I used absolute paths. syslogd.c: #ifdef WITH_DB #include "/usr/local/include/mysql/mysql.h" #include "/usr/local/include/mysql/errmsg.h" #endif New prob: postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -c pidfile.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o srUtils.o -lmysqlclient /usr/bin/ld: cannot find -lmysqlclient *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:42:55 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:42:55 +0200 Subject: [rsyslog] fixed paths more probs Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A6@grfint2.intern.adiscon.com> we are getting closer ;) mysqlclient is the mysql library. Please search for this one too... > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:39 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] fixed paths more probs > > The original paths were relative, but I don't know what they > what they were supposed to be relative to, so I used absolute paths. > > syslogd.c: > > #ifdef WITH_DB > #include "/usr/local/include/mysql/mysql.h" > #include "/usr/local/include/mysql/errmsg.h" > #endif > > > New prob: > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -c pidfile.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c > gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o > srUtils.o -lmysqlclient > /usr/bin/ld: cannot find -lmysqlclient > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:51:07 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:51:07 -0500 Subject: [rsyslog] mysql lib Message-ID: <003301c56516$61b8e400$0366a8c0@d> I have no idea what file to fix this in. postfix# find / -name "*mysql*" /usr/local/man/man1/mysql.1.gz /usr/local/man/man1/mysqladmin.1.gz /usr/local/man/man1/mysqldump.1.gz /usr/local/man/man1/mysqlshow.1.gz /usr/local/bin/mysql /usr/local/bin/mysql_config /usr/local/bin/mysql_fix_privilege_tables /usr/local/bin/mysqladmin /usr/local/bin/mysqlbinlog /usr/local/bin/mysqlbug /usr/local/bin/mysqlcheck /usr/local/bin/mysqldump /usr/local/bin/mysqlimport /usr/local/bin/mysqlmanager-pwgen /usr/local/bin/mysqlmanagerc /usr/local/bin/mysqlshow /usr/local/bin/mysqltest /usr/local/etc/rc.d/000.mysql-client.sh /usr/local/include/mysql /usr/local/include/mysql/mysql.h /usr/local/include/mysql/mysql_com.h /usr/local/include/mysql/mysql_embed.h /usr/local/include/mysql/mysql_time.h /usr/local/include/mysql/mysql_version.h /usr/local/include/mysql/mysqld_error.h /usr/local/lib/mysql /usr/local/lib/mysql/libmysqlclient.a /usr/local/lib/mysql/libmysqlclient.so /usr/local/lib/mysql/libmysqlclient.so.14 /usr/local/lib/mysql/libmysqlclient_r.a /usr/local/lib/mysql/libmysqlclient_r.so /usr/local/lib/mysql/libmysqlclient_r.so.14 /usr/local/share/mysql /usr/local/share/mysql/mysql_fix_privilege_tables.sql /var/db/pkg/mysql-client-4.1.10a /root/.mysql_history postfix# From rgerhards at hq.adiscon.com Mon May 30 14:54:09 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:54:09 +0200 Subject: [rsyslog] mysql lib Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A7@grfint2.intern.adiscon.com> I think it is this one: /usr/local/lib/mysql/libmysqlclient.a Seems to have different names on differenty OS :( If it isn't I'll try to compile, but probably I'll need until tomorrow... Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:51 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] mysql lib > > I have no idea what file to fix this in. > > > postfix# find / -name "*mysql*" > /usr/local/man/man1/mysql.1.gz > /usr/local/man/man1/mysqladmin.1.gz > /usr/local/man/man1/mysqldump.1.gz > /usr/local/man/man1/mysqlshow.1.gz > /usr/local/bin/mysql > /usr/local/bin/mysql_config > /usr/local/bin/mysql_fix_privilege_tables > /usr/local/bin/mysqladmin > /usr/local/bin/mysqlbinlog > /usr/local/bin/mysqlbug > /usr/local/bin/mysqlcheck > /usr/local/bin/mysqldump > /usr/local/bin/mysqlimport > /usr/local/bin/mysqlmanager-pwgen > /usr/local/bin/mysqlmanagerc > /usr/local/bin/mysqlshow > /usr/local/bin/mysqltest > /usr/local/etc/rc.d/000.mysql-client.sh > /usr/local/include/mysql > /usr/local/include/mysql/mysql.h > /usr/local/include/mysql/mysql_com.h > /usr/local/include/mysql/mysql_embed.h > /usr/local/include/mysql/mysql_time.h > /usr/local/include/mysql/mysql_version.h > /usr/local/include/mysql/mysqld_error.h > /usr/local/lib/mysql > /usr/local/lib/mysql/libmysqlclient.a > /usr/local/lib/mysql/libmysqlclient.so > /usr/local/lib/mysql/libmysqlclient.so.14 > /usr/local/lib/mysql/libmysqlclient_r.a > /usr/local/lib/mysql/libmysqlclient_r.so > /usr/local/lib/mysql/libmysqlclient_r.so.14 > /usr/local/share/mysql > /usr/local/share/mysql/mysql_fix_privilege_tables.sql > /var/db/pkg/mysql-client-4.1.10a > /root/.mysql_history > postfix# > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 15:43:29 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:43:29 -0500 Subject: [rsyslog] mysql lib Message-ID: <003e01c5651d$90debaa0$0366a8c0@d> This seemed to work. Makefile: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql From dennisolvany at gmail.com Mon May 30 15:55:58 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:55:58 -0500 Subject: [rsyslog] still no go Message-ID: <004501c5651f$70472730$0366a8c0@d> Using the binary that seemed to compile successfully, it is still not logging to the mysql server and I have to do #rsyslogd & to run it in the background. From rgerhards at hq.adiscon.com Mon May 30 16:06:25 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:06:25 +0200 Subject: [rsyslog] still no go Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AD@grfint2.intern.adiscon.com> Let's look at the backgrounding a bit later (that should not be too hard). Can you use the -d switch (debugging) and once it is started SIGUSR1 it, so that debugging is enabled again. stdout should then hold some helpful information. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 3:56 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] still no go > > Using the binary that seemed to compile successfully, it is > still not logging to the mysql server and I have to do > #rsyslogd & to run it in the background. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 16:23:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:23:56 -0500 Subject: [rsyslog] working now, maybe Message-ID: <000c01c56523$4aa909e0$0366a8c0@d> Looks like I got it working. It backgrounded just fine and it did a few inserts. I did the -d and found the problem. It didn't like the line without the semi-colon at the end. I put the semi-colon and it's working. Now I just need to know how to run it at boot. Can you tell me precisely how to enter the SIGUSR1 command. I'm trying to get it to log more stuff, but there may be a problem. Will advise. *.* >mysql.carcass.us,syslog,syslog,syslog; From dennisolvany at gmail.com Mon May 30 16:34:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:34:20 -0500 Subject: [rsyslog] syslogd exiting Message-ID: <002201c56524$d3936f10$0366a8c0@d> Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm thinking that the syslogd exit messages are not intended? Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 devicereportedtime message ID 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 From rgerhards at hq.adiscon.com Mon May 30 16:37:11 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:37:11 +0200 Subject: [rsyslog] working now, maybe Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AF@grfint2.intern.adiscon.com> Dennis, the config error reporting is weak in this release ;) (soon to be done). Regarding the boot under BSD... I will fire up my machine soon and see how I addressed id. On Debian, I have included it in the rc.d sequence - maybe this helps to get you going... Regarding the SIGUSR1. Do a ps -ef|grep syslog - this will show you the pid (and also if any other syslogd is running - sometimes happend to foolish me ;)). do a "kill -USR1 ". That will do the trick. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:24 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] working now, maybe > > Looks like I got it working. It backgrounded just fine and it > did a few inserts. I did the -d and found the problem. It > didn't like the line without the semi-colon at the end. I put > the semi-colon and it's working. Now I just need to know how > to run it at boot. Can you tell me precisely how to enter the > SIGUSR1 command. I'm trying to get it to log more stuff, but > there may be a problem. Will advise. > > *.* >mysql.carcass.us,syslog,syslog,syslog; > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From rgerhards at hq.adiscon.com Mon May 30 16:38:47 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:38:47 +0200 Subject: [rsyslog] syslogd exiting Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621B0@grfint2.intern.adiscon.com> Indeed, they are (if you mean " 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 "). They are in there so that a log parser can detect the shutdown. And, no, there is currently no way to turn them off (except by patching the source, which shold be very easy - search for "exiting"). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:34 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] syslogd exiting > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm > thinking that the syslogd exit messages are not intended? > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 > devicereportedtime message ID > 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 > 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 > 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 > 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 > 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 > 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 > 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 02:20:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 19:20:56 -0500 Subject: [rsyslog] other syslogd Message-ID: <001601c56576$b1d834d0$0366a8c0@d> I'm trying to understand this. When rsyslogd starts, it kills syslogd? I killed syslogd manually and now just have rsyslogd running and it seems to be working just fine. From dennisolvany at gmail.com Tue May 31 06:37:03 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 23:37:03 -0500 Subject: [rsyslog] Progress So Far Message-ID: <000c01c5659b$b9d557b0$0366a8c0@d> I wrote a short synopsis of what I've accomplished thus far: Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure rsyslog.conf Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. add: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. From dennisolvany at gmail.com Tue May 31 07:54:59 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 00:54:59 -0500 Subject: [rsyslog] Revised Synopsis Message-ID: <002301c565a5$47e7ccf0$0366a8c0@d> Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql #add -L/usr/local/lib/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure/Fix rsyslog.conf. Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Line 178: *.* >hostname,dbname,userid,password; #add semi-colon Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. Add Line: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. Help Resources: # man rsyslog.conf # man rsyslogd From rgerhards at hq.adiscon.com Tue May 31 09:01:50 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Tue, 31 May 2005 09:01:50 +0200 Subject: [rsyslog] other syslogd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621BA@grfint2.intern.adiscon.com> Hi Dennis, no, rsyslogd does *NOT* at all interfer with standard syslogd. The only relationship is the syslog listen port (514). As only one process can listen on it, rsyslogd startup will fail when syslogd runs and vice versa. The idea is that you disable stock syslogd before you start rsyslogd. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Tuesday, May 31, 2005 2:21 AM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] other syslogd > > I'm trying to understand this. When rsyslogd starts, it kills > syslogd? I killed syslogd manually and now just have rsyslogd > running and it seems to be working just fine. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 20:43:33 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 13:43:33 -0500 Subject: [rsyslog] syslogd and rsyslogd together Message-ID: <000e01c56610$a693ef70$0366a8c0@d> Syslogd and rsyslogd didn't seem to play well together on my system. I had some debugging output, but I don't recall precisely what it said and I didn't save it. I didn't think rsyslogd would bind to 514 by default, would it? I think I will try and reenact the scenario. From gneamob at yahoo.com Sat May 14 04:03:24 2005 From: gneamob at yahoo.com (Scott) Date: Fri, 13 May 2005 19:03:24 -0700 (PDT) Subject: [rsyslog] Test Message-ID: <20050514020325.96683.qmail@web54307.mail.yahoo.com> This is a test to make sure that I can actually post since it looks like no one else has. -S Discover Yahoo! Find restaurants, movies, travel and more fun for the weekend. Check it out! http://discover.yahoo.com/weekend.html From dennisolvany at gmail.com Mon May 30 12:14:42 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 05:14:42 -0500 Subject: [rsyslog] freebsd Message-ID: <000801c56500$7fcc54b0$0366a8c0@d> I am highly interested in sql logging and I'm glad to see that there is an active project supporting it. I am having trouble compiling this on a freebsd system. Do I need to enable linux binary compatibility? Are there rudimentary instructions for compiling on freebsd. If I could get it working, I would gladly write a doc on freebsd implementation. From rgerhards at hq.adiscon.com Mon May 30 12:16:59 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 12:16:59 +0200 Subject: [rsyslog] freebsd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> hi, please let me know which issues you have on freebsd. I think I compiled it successfully on freebsd, maybe I overlooked something. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 12:15 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] freebsd > > I am highly interested in sql logging and I'm glad to see > that there is an active project supporting it. I am having > trouble compiling this on a freebsd system. Do I need to > enable linux binary compatibility? Are there rudimentary > instructions for compiling on freebsd. If I could get it > working, I would gladly write a doc on freebsd implementation. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 13:59:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 06:59:20 -0500 Subject: [rsyslog] freebsd References: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> Message-ID: <000901c5650f$172a7360$0366a8c0@d> Thanks for responding. I was trying to compile 083 on freebsd. Got 084 and it compiled fine. Doesn't seem to be logging to the mysql server though. Fresh freebsd5.4 install, mysql41-client, rsyslog-084. Do I disable syslogd? Any other required software? I have no idea how to troubleshoot this. Connect to mysql server just fine with mysql client. /etc/rsyslog.conf Commented all but: *.* >mysql.carcass.us,syslog,syslog,syslog I have no idea how to start it at boot. Not a bsd expert....yet. postfix# find / -name "rsyslog*" /usr/sbin/rsyslogd /usr/share/man/cat5/rsyslog.conf.5.gz /usr/share/man/cat8/rsyslogd.8.gz /usr/share/man/man5/rsyslog.conf.5 /usr/share/man/man8/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4.tar.tar /usr/home/dennisolvany/rsyslog-0.8.4 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslog.conf.5 /var/run/rsyslogd.pid /etc/rsyslog.conf postfix# help much appreciated From dennisolvany at gmail.com Mon May 30 14:06:13 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:06:13 -0500 Subject: [rsyslog] freebsd Message-ID: <001001c5650f$fa0b8160$0366a8c0@d> doh...didn't compile with db support From dennisolvany at gmail.com Mon May 30 14:16:02 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:16:02 -0500 Subject: [rsyslog] now compile prob Message-ID: <001a01c56511$6dabc430$0366a8c0@d> postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c syslogd.c:593:26: mysql/mysql.h: No such file or directory syslogd.c:594:26: mysql/errmsg.h: No such file or directory syslogd.c:825: error: syntax error before "MYSQL" syslogd.c: In function `initMySQL': syslogd.c:4928: warning: implicit declaration of function `mysql_init' syslogd.c:4928: error: structure has no member named `f_hmysql' syslogd.c:4932: warning: implicit declaration of function `mysql_real_connect' syslogd.c:4932: error: structure has no member named `f_hmysql' syslogd.c:4943: warning: implicit declaration of function `mysql_errno' syslogd.c:4943: error: structure has no member named `f_hmysql' syslogd.c: In function `closeMySQL': syslogd.c:4955: warning: implicit declaration of function `mysql_close' syslogd.c:4955: error: structure has no member named `f_hmysql' syslogd.c: In function `writeMySQL': syslogd.c:5000: warning: implicit declaration of function `mysql_query' syslogd.c:5000: error: structure has no member named `f_hmysql' syslogd.c:5010: error: structure has no member named `f_hmysql' syslogd.c: In function `DBErrorHandler': syslogd.c:5045: error: structure has no member named `f_hmysql' syslogd.c:5046: warning: implicit declaration of function `mysql_error' syslogd.c:5046: error: structure has no member named `f_hmysql' syslogd.c:5049: error: structure has no member named `f_hmysql' *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:20:54 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:20:54 +0200 Subject: [rsyslog] now compile prob Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A1@grfint2.intern.adiscon.com> oops... looks like I didn't compile with DB support. shame on me ;) I guess it's just a path issue, but I unfortunaltey can not verify right at this moment. Please do a search for mysql.h and correct the pathes according to what you find. Let me know if that works (and if so, where you found it ;)). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:16 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] now compile prob > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > syslogd.c:593:26: mysql/mysql.h: No such file or directory > syslogd.c:594:26: mysql/errmsg.h: No such file or directory > syslogd.c:825: error: syntax error before "MYSQL" > syslogd.c: In function `initMySQL': > syslogd.c:4928: warning: implicit declaration of function `mysql_init' > syslogd.c:4928: error: structure has no member named `f_hmysql' > syslogd.c:4932: warning: implicit declaration of function > `mysql_real_connect' > syslogd.c:4932: error: structure has no member named `f_hmysql' > syslogd.c:4943: warning: implicit declaration of function > `mysql_errno' > syslogd.c:4943: error: structure has no member named `f_hmysql' > syslogd.c: In function `closeMySQL': > syslogd.c:4955: warning: implicit declaration of function > `mysql_close' > syslogd.c:4955: error: structure has no member named `f_hmysql' > syslogd.c: In function `writeMySQL': > syslogd.c:5000: warning: implicit declaration of function > `mysql_query' > syslogd.c:5000: error: structure has no member named `f_hmysql' > syslogd.c:5010: error: structure has no member named `f_hmysql' > syslogd.c: In function `DBErrorHandler': > syslogd.c:5045: error: structure has no member named `f_hmysql' > syslogd.c:5046: warning: implicit declaration of function > `mysql_error' > syslogd.c:5046: error: structure has no member named `f_hmysql' > syslogd.c:5049: error: structure has no member named `f_hmysql' > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:38:57 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:38:57 -0500 Subject: [rsyslog] fixed paths more probs Message-ID: <002501c56514$9fc36060$0366a8c0@d> The original paths were relative, but I don't know what they what they were supposed to be relative to, so I used absolute paths. syslogd.c: #ifdef WITH_DB #include "/usr/local/include/mysql/mysql.h" #include "/usr/local/include/mysql/errmsg.h" #endif New prob: postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -c pidfile.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o srUtils.o -lmysqlclient /usr/bin/ld: cannot find -lmysqlclient *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:42:55 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:42:55 +0200 Subject: [rsyslog] fixed paths more probs Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A6@grfint2.intern.adiscon.com> we are getting closer ;) mysqlclient is the mysql library. Please search for this one too... > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:39 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] fixed paths more probs > > The original paths were relative, but I don't know what they > what they were supposed to be relative to, so I used absolute paths. > > syslogd.c: > > #ifdef WITH_DB > #include "/usr/local/include/mysql/mysql.h" > #include "/usr/local/include/mysql/errmsg.h" > #endif > > > New prob: > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -c pidfile.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c > gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o > srUtils.o -lmysqlclient > /usr/bin/ld: cannot find -lmysqlclient > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:51:07 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:51:07 -0500 Subject: [rsyslog] mysql lib Message-ID: <003301c56516$61b8e400$0366a8c0@d> I have no idea what file to fix this in. postfix# find / -name "*mysql*" /usr/local/man/man1/mysql.1.gz /usr/local/man/man1/mysqladmin.1.gz /usr/local/man/man1/mysqldump.1.gz /usr/local/man/man1/mysqlshow.1.gz /usr/local/bin/mysql /usr/local/bin/mysql_config /usr/local/bin/mysql_fix_privilege_tables /usr/local/bin/mysqladmin /usr/local/bin/mysqlbinlog /usr/local/bin/mysqlbug /usr/local/bin/mysqlcheck /usr/local/bin/mysqldump /usr/local/bin/mysqlimport /usr/local/bin/mysqlmanager-pwgen /usr/local/bin/mysqlmanagerc /usr/local/bin/mysqlshow /usr/local/bin/mysqltest /usr/local/etc/rc.d/000.mysql-client.sh /usr/local/include/mysql /usr/local/include/mysql/mysql.h /usr/local/include/mysql/mysql_com.h /usr/local/include/mysql/mysql_embed.h /usr/local/include/mysql/mysql_time.h /usr/local/include/mysql/mysql_version.h /usr/local/include/mysql/mysqld_error.h /usr/local/lib/mysql /usr/local/lib/mysql/libmysqlclient.a /usr/local/lib/mysql/libmysqlclient.so /usr/local/lib/mysql/libmysqlclient.so.14 /usr/local/lib/mysql/libmysqlclient_r.a /usr/local/lib/mysql/libmysqlclient_r.so /usr/local/lib/mysql/libmysqlclient_r.so.14 /usr/local/share/mysql /usr/local/share/mysql/mysql_fix_privilege_tables.sql /var/db/pkg/mysql-client-4.1.10a /root/.mysql_history postfix# From rgerhards at hq.adiscon.com Mon May 30 14:54:09 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:54:09 +0200 Subject: [rsyslog] mysql lib Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A7@grfint2.intern.adiscon.com> I think it is this one: /usr/local/lib/mysql/libmysqlclient.a Seems to have different names on differenty OS :( If it isn't I'll try to compile, but probably I'll need until tomorrow... Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:51 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] mysql lib > > I have no idea what file to fix this in. > > > postfix# find / -name "*mysql*" > /usr/local/man/man1/mysql.1.gz > /usr/local/man/man1/mysqladmin.1.gz > /usr/local/man/man1/mysqldump.1.gz > /usr/local/man/man1/mysqlshow.1.gz > /usr/local/bin/mysql > /usr/local/bin/mysql_config > /usr/local/bin/mysql_fix_privilege_tables > /usr/local/bin/mysqladmin > /usr/local/bin/mysqlbinlog > /usr/local/bin/mysqlbug > /usr/local/bin/mysqlcheck > /usr/local/bin/mysqldump > /usr/local/bin/mysqlimport > /usr/local/bin/mysqlmanager-pwgen > /usr/local/bin/mysqlmanagerc > /usr/local/bin/mysqlshow > /usr/local/bin/mysqltest > /usr/local/etc/rc.d/000.mysql-client.sh > /usr/local/include/mysql > /usr/local/include/mysql/mysql.h > /usr/local/include/mysql/mysql_com.h > /usr/local/include/mysql/mysql_embed.h > /usr/local/include/mysql/mysql_time.h > /usr/local/include/mysql/mysql_version.h > /usr/local/include/mysql/mysqld_error.h > /usr/local/lib/mysql > /usr/local/lib/mysql/libmysqlclient.a > /usr/local/lib/mysql/libmysqlclient.so > /usr/local/lib/mysql/libmysqlclient.so.14 > /usr/local/lib/mysql/libmysqlclient_r.a > /usr/local/lib/mysql/libmysqlclient_r.so > /usr/local/lib/mysql/libmysqlclient_r.so.14 > /usr/local/share/mysql > /usr/local/share/mysql/mysql_fix_privilege_tables.sql > /var/db/pkg/mysql-client-4.1.10a > /root/.mysql_history > postfix# > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 15:43:29 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:43:29 -0500 Subject: [rsyslog] mysql lib Message-ID: <003e01c5651d$90debaa0$0366a8c0@d> This seemed to work. Makefile: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql From dennisolvany at gmail.com Mon May 30 15:55:58 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:55:58 -0500 Subject: [rsyslog] still no go Message-ID: <004501c5651f$70472730$0366a8c0@d> Using the binary that seemed to compile successfully, it is still not logging to the mysql server and I have to do #rsyslogd & to run it in the background. From rgerhards at hq.adiscon.com Mon May 30 16:06:25 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:06:25 +0200 Subject: [rsyslog] still no go Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AD@grfint2.intern.adiscon.com> Let's look at the backgrounding a bit later (that should not be too hard). Can you use the -d switch (debugging) and once it is started SIGUSR1 it, so that debugging is enabled again. stdout should then hold some helpful information. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 3:56 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] still no go > > Using the binary that seemed to compile successfully, it is > still not logging to the mysql server and I have to do > #rsyslogd & to run it in the background. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 16:23:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:23:56 -0500 Subject: [rsyslog] working now, maybe Message-ID: <000c01c56523$4aa909e0$0366a8c0@d> Looks like I got it working. It backgrounded just fine and it did a few inserts. I did the -d and found the problem. It didn't like the line without the semi-colon at the end. I put the semi-colon and it's working. Now I just need to know how to run it at boot. Can you tell me precisely how to enter the SIGUSR1 command. I'm trying to get it to log more stuff, but there may be a problem. Will advise. *.* >mysql.carcass.us,syslog,syslog,syslog; From dennisolvany at gmail.com Mon May 30 16:34:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:34:20 -0500 Subject: [rsyslog] syslogd exiting Message-ID: <002201c56524$d3936f10$0366a8c0@d> Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm thinking that the syslogd exit messages are not intended? Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 devicereportedtime message ID 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 From rgerhards at hq.adiscon.com Mon May 30 16:37:11 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:37:11 +0200 Subject: [rsyslog] working now, maybe Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AF@grfint2.intern.adiscon.com> Dennis, the config error reporting is weak in this release ;) (soon to be done). Regarding the boot under BSD... I will fire up my machine soon and see how I addressed id. On Debian, I have included it in the rc.d sequence - maybe this helps to get you going... Regarding the SIGUSR1. Do a ps -ef|grep syslog - this will show you the pid (and also if any other syslogd is running - sometimes happend to foolish me ;)). do a "kill -USR1 ". That will do the trick. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:24 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] working now, maybe > > Looks like I got it working. It backgrounded just fine and it > did a few inserts. I did the -d and found the problem. It > didn't like the line without the semi-colon at the end. I put > the semi-colon and it's working. Now I just need to know how > to run it at boot. Can you tell me precisely how to enter the > SIGUSR1 command. I'm trying to get it to log more stuff, but > there may be a problem. Will advise. > > *.* >mysql.carcass.us,syslog,syslog,syslog; > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From rgerhards at hq.adiscon.com Mon May 30 16:38:47 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:38:47 +0200 Subject: [rsyslog] syslogd exiting Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621B0@grfint2.intern.adiscon.com> Indeed, they are (if you mean " 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 "). They are in there so that a log parser can detect the shutdown. And, no, there is currently no way to turn them off (except by patching the source, which shold be very easy - search for "exiting"). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:34 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] syslogd exiting > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm > thinking that the syslogd exit messages are not intended? > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 > devicereportedtime message ID > 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 > 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 > 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 > 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 > 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 > 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 > 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 02:20:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 19:20:56 -0500 Subject: [rsyslog] other syslogd Message-ID: <001601c56576$b1d834d0$0366a8c0@d> I'm trying to understand this. When rsyslogd starts, it kills syslogd? I killed syslogd manually and now just have rsyslogd running and it seems to be working just fine. From dennisolvany at gmail.com Tue May 31 06:37:03 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 23:37:03 -0500 Subject: [rsyslog] Progress So Far Message-ID: <000c01c5659b$b9d557b0$0366a8c0@d> I wrote a short synopsis of what I've accomplished thus far: Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure rsyslog.conf Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. add: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. From dennisolvany at gmail.com Tue May 31 07:54:59 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 00:54:59 -0500 Subject: [rsyslog] Revised Synopsis Message-ID: <002301c565a5$47e7ccf0$0366a8c0@d> Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql #add -L/usr/local/lib/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure/Fix rsyslog.conf. Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Line 178: *.* >hostname,dbname,userid,password; #add semi-colon Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. Add Line: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. Help Resources: # man rsyslog.conf # man rsyslogd From rgerhards at hq.adiscon.com Tue May 31 09:01:50 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Tue, 31 May 2005 09:01:50 +0200 Subject: [rsyslog] other syslogd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621BA@grfint2.intern.adiscon.com> Hi Dennis, no, rsyslogd does *NOT* at all interfer with standard syslogd. The only relationship is the syslog listen port (514). As only one process can listen on it, rsyslogd startup will fail when syslogd runs and vice versa. The idea is that you disable stock syslogd before you start rsyslogd. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Tuesday, May 31, 2005 2:21 AM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] other syslogd > > I'm trying to understand this. When rsyslogd starts, it kills > syslogd? I killed syslogd manually and now just have rsyslogd > running and it seems to be working just fine. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 20:43:33 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 13:43:33 -0500 Subject: [rsyslog] syslogd and rsyslogd together Message-ID: <000e01c56610$a693ef70$0366a8c0@d> Syslogd and rsyslogd didn't seem to play well together on my system. I had some debugging output, but I don't recall precisely what it said and I didn't save it. I didn't think rsyslogd would bind to 514 by default, would it? I think I will try and reenact the scenario. From gneamob at yahoo.com Sat May 14 04:03:24 2005 From: gneamob at yahoo.com (Scott) Date: Fri, 13 May 2005 19:03:24 -0700 (PDT) Subject: [rsyslog] Test Message-ID: <20050514020325.96683.qmail@web54307.mail.yahoo.com> This is a test to make sure that I can actually post since it looks like no one else has. -S Discover Yahoo! Find restaurants, movies, travel and more fun for the weekend. Check it out! http://discover.yahoo.com/weekend.html From dennisolvany at gmail.com Mon May 30 12:14:42 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 05:14:42 -0500 Subject: [rsyslog] freebsd Message-ID: <000801c56500$7fcc54b0$0366a8c0@d> I am highly interested in sql logging and I'm glad to see that there is an active project supporting it. I am having trouble compiling this on a freebsd system. Do I need to enable linux binary compatibility? Are there rudimentary instructions for compiling on freebsd. If I could get it working, I would gladly write a doc on freebsd implementation. From rgerhards at hq.adiscon.com Mon May 30 12:16:59 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 12:16:59 +0200 Subject: [rsyslog] freebsd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> hi, please let me know which issues you have on freebsd. I think I compiled it successfully on freebsd, maybe I overlooked something. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 12:15 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] freebsd > > I am highly interested in sql logging and I'm glad to see > that there is an active project supporting it. I am having > trouble compiling this on a freebsd system. Do I need to > enable linux binary compatibility? Are there rudimentary > instructions for compiling on freebsd. If I could get it > working, I would gladly write a doc on freebsd implementation. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 13:59:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 06:59:20 -0500 Subject: [rsyslog] freebsd References: <577465F99B41C842AAFBE9ED71E70ABA06219A@grfint2.intern.adiscon.com> Message-ID: <000901c5650f$172a7360$0366a8c0@d> Thanks for responding. I was trying to compile 083 on freebsd. Got 084 and it compiled fine. Doesn't seem to be logging to the mysql server though. Fresh freebsd5.4 install, mysql41-client, rsyslog-084. Do I disable syslogd? Any other required software? I have no idea how to troubleshoot this. Connect to mysql server just fine with mysql client. /etc/rsyslog.conf Commented all but: *.* >mysql.carcass.us,syslog,syslog,syslog I have no idea how to start it at boot. Not a bsd expert....yet. postfix# find / -name "rsyslog*" /usr/sbin/rsyslogd /usr/share/man/cat5/rsyslog.conf.5.gz /usr/share/man/cat8/rsyslogd.8.gz /usr/share/man/man5/rsyslog.conf.5 /usr/share/man/man8/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4.tar.tar /usr/home/dennisolvany/rsyslog-0.8.4 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslogd.8 /usr/home/dennisolvany/rsyslog-0.8.4/rsyslog.conf.5 /var/run/rsyslogd.pid /etc/rsyslog.conf postfix# help much appreciated From dennisolvany at gmail.com Mon May 30 14:06:13 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:06:13 -0500 Subject: [rsyslog] freebsd Message-ID: <001001c5650f$fa0b8160$0366a8c0@d> doh...didn't compile with db support From dennisolvany at gmail.com Mon May 30 14:16:02 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:16:02 -0500 Subject: [rsyslog] now compile prob Message-ID: <001a01c56511$6dabc430$0366a8c0@d> postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c syslogd.c:593:26: mysql/mysql.h: No such file or directory syslogd.c:594:26: mysql/errmsg.h: No such file or directory syslogd.c:825: error: syntax error before "MYSQL" syslogd.c: In function `initMySQL': syslogd.c:4928: warning: implicit declaration of function `mysql_init' syslogd.c:4928: error: structure has no member named `f_hmysql' syslogd.c:4932: warning: implicit declaration of function `mysql_real_connect' syslogd.c:4932: error: structure has no member named `f_hmysql' syslogd.c:4943: warning: implicit declaration of function `mysql_errno' syslogd.c:4943: error: structure has no member named `f_hmysql' syslogd.c: In function `closeMySQL': syslogd.c:4955: warning: implicit declaration of function `mysql_close' syslogd.c:4955: error: structure has no member named `f_hmysql' syslogd.c: In function `writeMySQL': syslogd.c:5000: warning: implicit declaration of function `mysql_query' syslogd.c:5000: error: structure has no member named `f_hmysql' syslogd.c:5010: error: structure has no member named `f_hmysql' syslogd.c: In function `DBErrorHandler': syslogd.c:5045: error: structure has no member named `f_hmysql' syslogd.c:5046: warning: implicit declaration of function `mysql_error' syslogd.c:5046: error: structure has no member named `f_hmysql' syslogd.c:5049: error: structure has no member named `f_hmysql' *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:20:54 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:20:54 +0200 Subject: [rsyslog] now compile prob Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A1@grfint2.intern.adiscon.com> oops... looks like I didn't compile with DB support. shame on me ;) I guess it's just a path issue, but I unfortunaltey can not verify right at this moment. Please do a search for mysql.h and correct the pathes according to what you find. Let me know if that works (and if so, where you found it ;)). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:16 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] now compile prob > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > syslogd.c:593:26: mysql/mysql.h: No such file or directory > syslogd.c:594:26: mysql/errmsg.h: No such file or directory > syslogd.c:825: error: syntax error before "MYSQL" > syslogd.c: In function `initMySQL': > syslogd.c:4928: warning: implicit declaration of function `mysql_init' > syslogd.c:4928: error: structure has no member named `f_hmysql' > syslogd.c:4932: warning: implicit declaration of function > `mysql_real_connect' > syslogd.c:4932: error: structure has no member named `f_hmysql' > syslogd.c:4943: warning: implicit declaration of function > `mysql_errno' > syslogd.c:4943: error: structure has no member named `f_hmysql' > syslogd.c: In function `closeMySQL': > syslogd.c:4955: warning: implicit declaration of function > `mysql_close' > syslogd.c:4955: error: structure has no member named `f_hmysql' > syslogd.c: In function `writeMySQL': > syslogd.c:5000: warning: implicit declaration of function > `mysql_query' > syslogd.c:5000: error: structure has no member named `f_hmysql' > syslogd.c:5010: error: structure has no member named `f_hmysql' > syslogd.c: In function `DBErrorHandler': > syslogd.c:5045: error: structure has no member named `f_hmysql' > syslogd.c:5046: warning: implicit declaration of function > `mysql_error' > syslogd.c:5046: error: structure has no member named `f_hmysql' > syslogd.c:5049: error: structure has no member named `f_hmysql' > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:38:57 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:38:57 -0500 Subject: [rsyslog] fixed paths more probs Message-ID: <002501c56514$9fc36060$0366a8c0@d> The original paths were relative, but I don't know what they what they were supposed to be relative to, so I used absolute paths. syslogd.c: #ifdef WITH_DB #include "/usr/local/include/mysql/mysql.h" #include "/usr/local/include/mysql/errmsg.h" #endif New prob: postfix# make gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -c pidfile.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c gcc -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o srUtils.o -lmysqlclient /usr/bin/ld: cannot find -lmysqlclient *** Error code 1 Stop in /usr/home/dennisolvany/rsyslog-0.8.4. postfix# From rgerhards at hq.adiscon.com Mon May 30 14:42:55 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:42:55 +0200 Subject: [rsyslog] fixed paths more probs Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A6@grfint2.intern.adiscon.com> we are getting closer ;) mysqlclient is the mysql library. Please search for this one too... > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:39 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] fixed paths more probs > > The original paths were relative, but I don't know what they > what they were supposed to be relative to, so I used absolute paths. > > syslogd.c: > > #ifdef WITH_DB > #include "/usr/local/include/mysql/mysql.h" > #include "/usr/local/include/mysql/errmsg.h" > #endif > > > New prob: > > postfix# make > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c syslogd.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -c pidfile.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c template.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c stringbuf.c > gcc -O3 -DSYSV -fomit-frame-pointer -Wall > -fno-strength-reduce -DWITH_DB -DSYSLOG_INET -DSYSLOG_UNIXAF > -DNO_SCCS -DFSSTND -DSYSLOGD_PIDNAME=\"rsyslogd.pid\" -c srUtils.c > gcc -s -o syslogd syslogd.o pidfile.o template.o stringbuf.o > srUtils.o -lmysqlclient > /usr/bin/ld: cannot find -lmysqlclient > *** Error code 1 > > Stop in /usr/home/dennisolvany/rsyslog-0.8.4. > postfix# > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 14:51:07 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 07:51:07 -0500 Subject: [rsyslog] mysql lib Message-ID: <003301c56516$61b8e400$0366a8c0@d> I have no idea what file to fix this in. postfix# find / -name "*mysql*" /usr/local/man/man1/mysql.1.gz /usr/local/man/man1/mysqladmin.1.gz /usr/local/man/man1/mysqldump.1.gz /usr/local/man/man1/mysqlshow.1.gz /usr/local/bin/mysql /usr/local/bin/mysql_config /usr/local/bin/mysql_fix_privilege_tables /usr/local/bin/mysqladmin /usr/local/bin/mysqlbinlog /usr/local/bin/mysqlbug /usr/local/bin/mysqlcheck /usr/local/bin/mysqldump /usr/local/bin/mysqlimport /usr/local/bin/mysqlmanager-pwgen /usr/local/bin/mysqlmanagerc /usr/local/bin/mysqlshow /usr/local/bin/mysqltest /usr/local/etc/rc.d/000.mysql-client.sh /usr/local/include/mysql /usr/local/include/mysql/mysql.h /usr/local/include/mysql/mysql_com.h /usr/local/include/mysql/mysql_embed.h /usr/local/include/mysql/mysql_time.h /usr/local/include/mysql/mysql_version.h /usr/local/include/mysql/mysqld_error.h /usr/local/lib/mysql /usr/local/lib/mysql/libmysqlclient.a /usr/local/lib/mysql/libmysqlclient.so /usr/local/lib/mysql/libmysqlclient.so.14 /usr/local/lib/mysql/libmysqlclient_r.a /usr/local/lib/mysql/libmysqlclient_r.so /usr/local/lib/mysql/libmysqlclient_r.so.14 /usr/local/share/mysql /usr/local/share/mysql/mysql_fix_privilege_tables.sql /var/db/pkg/mysql-client-4.1.10a /root/.mysql_history postfix# From rgerhards at hq.adiscon.com Mon May 30 14:54:09 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 14:54:09 +0200 Subject: [rsyslog] mysql lib Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621A7@grfint2.intern.adiscon.com> I think it is this one: /usr/local/lib/mysql/libmysqlclient.a Seems to have different names on differenty OS :( If it isn't I'll try to compile, but probably I'll need until tomorrow... Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 2:51 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] mysql lib > > I have no idea what file to fix this in. > > > postfix# find / -name "*mysql*" > /usr/local/man/man1/mysql.1.gz > /usr/local/man/man1/mysqladmin.1.gz > /usr/local/man/man1/mysqldump.1.gz > /usr/local/man/man1/mysqlshow.1.gz > /usr/local/bin/mysql > /usr/local/bin/mysql_config > /usr/local/bin/mysql_fix_privilege_tables > /usr/local/bin/mysqladmin > /usr/local/bin/mysqlbinlog > /usr/local/bin/mysqlbug > /usr/local/bin/mysqlcheck > /usr/local/bin/mysqldump > /usr/local/bin/mysqlimport > /usr/local/bin/mysqlmanager-pwgen > /usr/local/bin/mysqlmanagerc > /usr/local/bin/mysqlshow > /usr/local/bin/mysqltest > /usr/local/etc/rc.d/000.mysql-client.sh > /usr/local/include/mysql > /usr/local/include/mysql/mysql.h > /usr/local/include/mysql/mysql_com.h > /usr/local/include/mysql/mysql_embed.h > /usr/local/include/mysql/mysql_time.h > /usr/local/include/mysql/mysql_version.h > /usr/local/include/mysql/mysqld_error.h > /usr/local/lib/mysql > /usr/local/lib/mysql/libmysqlclient.a > /usr/local/lib/mysql/libmysqlclient.so > /usr/local/lib/mysql/libmysqlclient.so.14 > /usr/local/lib/mysql/libmysqlclient_r.a > /usr/local/lib/mysql/libmysqlclient_r.so > /usr/local/lib/mysql/libmysqlclient_r.so.14 > /usr/local/share/mysql > /usr/local/share/mysql/mysql_fix_privilege_tables.sql > /var/db/pkg/mysql-client-4.1.10a > /root/.mysql_history > postfix# > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 15:43:29 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:43:29 -0500 Subject: [rsyslog] mysql lib Message-ID: <003e01c5651d$90debaa0$0366a8c0@d> This seemed to work. Makefile: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql From dennisolvany at gmail.com Mon May 30 15:55:58 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 08:55:58 -0500 Subject: [rsyslog] still no go Message-ID: <004501c5651f$70472730$0366a8c0@d> Using the binary that seemed to compile successfully, it is still not logging to the mysql server and I have to do #rsyslogd & to run it in the background. From rgerhards at hq.adiscon.com Mon May 30 16:06:25 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:06:25 +0200 Subject: [rsyslog] still no go Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AD@grfint2.intern.adiscon.com> Let's look at the backgrounding a bit later (that should not be too hard). Can you use the -d switch (debugging) and once it is started SIGUSR1 it, so that debugging is enabled again. stdout should then hold some helpful information. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 3:56 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] still no go > > Using the binary that seemed to compile successfully, it is > still not logging to the mysql server and I have to do > #rsyslogd & to run it in the background. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Mon May 30 16:23:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:23:56 -0500 Subject: [rsyslog] working now, maybe Message-ID: <000c01c56523$4aa909e0$0366a8c0@d> Looks like I got it working. It backgrounded just fine and it did a few inserts. I did the -d and found the problem. It didn't like the line without the semi-colon at the end. I put the semi-colon and it's working. Now I just need to know how to run it at boot. Can you tell me precisely how to enter the SIGUSR1 command. I'm trying to get it to log more stuff, but there may be a problem. Will advise. *.* >mysql.carcass.us,syslog,syslog,syslog; From dennisolvany at gmail.com Mon May 30 16:34:20 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 09:34:20 -0500 Subject: [rsyslog] syslogd exiting Message-ID: <002201c56524$d3936f10$0366a8c0@d> Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm thinking that the syslogd exit messages are not intended? Query SELECT devicereportedtime,message, ID FROM `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 devicereportedtime message ID 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 From rgerhards at hq.adiscon.com Mon May 30 16:37:11 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:37:11 +0200 Subject: [rsyslog] working now, maybe Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621AF@grfint2.intern.adiscon.com> Dennis, the config error reporting is weak in this release ;) (soon to be done). Regarding the boot under BSD... I will fire up my machine soon and see how I addressed id. On Debian, I have included it in the rc.d sequence - maybe this helps to get you going... Regarding the SIGUSR1. Do a ps -ef|grep syslog - this will show you the pid (and also if any other syslogd is running - sometimes happend to foolish me ;)). do a "kill -USR1 ". That will do the trick. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:24 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] working now, maybe > > Looks like I got it working. It backgrounded just fine and it > did a few inserts. I did the -d and found the problem. It > didn't like the line without the semi-colon at the end. I put > the semi-colon and it's working. Now I just need to know how > to run it at boot. Can you tell me precisely how to enter the > SIGUSR1 command. I'm trying to get it to log more stuff, but > there may be a problem. Will advise. > > *.* >mysql.carcass.us,syslog,syslog,syslog; > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From rgerhards at hq.adiscon.com Mon May 30 16:38:47 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Mon, 30 May 2005 16:38:47 +0200 Subject: [rsyslog] syslogd exiting Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621B0@grfint2.intern.adiscon.com> Indeed, they are (if you mean " 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 "). They are in there so that a log parser can detect the shutdown. And, no, there is currently no way to turn them off (except by patching the source, which shold be very easy - search for "exiting"). Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Monday, May 30, 2005 4:34 PM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] syslogd exiting > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005I'm > thinking that the syslogd exit messages are not intended? > > Query SELECT devicereportedtime,message, ID FROM > `syslog`.`SystemEvents` S, Mon May 30 09:30:52 2005 > devicereportedtime message ID > 2005-05-30 13:47:51 rsyslogd 0.8.4: restart. 1 > 2005-05-30 13:49:17 syslogd: exiting on signal 2 2 > 2005-05-30 13:49:51 rsyslogd 0.8.4: restart. 3 > 2005-05-30 14:04:28 syslogd: exiting on signal 15 4 > 2005-05-30 14:06:50 rsyslogd 0.8.4: restart. 5 > 2005-05-30 14:09:03 syslogd: exiting on signal 2 6 > 2005-05-30 14:09:31 rsyslogd 0.8.4: restart. 7 > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 02:20:56 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 19:20:56 -0500 Subject: [rsyslog] other syslogd Message-ID: <001601c56576$b1d834d0$0366a8c0@d> I'm trying to understand this. When rsyslogd starts, it kills syslogd? I killed syslogd manually and now just have rsyslogd running and it seems to be working just fine. From dennisolvany at gmail.com Tue May 31 06:37:03 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Mon, 30 May 2005 23:37:03 -0500 Subject: [rsyslog] Progress So Far Message-ID: <000c01c5659b$b9d557b0$0366a8c0@d> I wrote a short synopsis of what I've accomplished thus far: Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure rsyslog.conf Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. add: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. From dennisolvany at gmail.com Tue May 31 07:54:59 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 00:54:59 -0500 Subject: [rsyslog] Revised Synopsis Message-ID: <002301c565a5$47e7ccf0$0366a8c0@d> Syslog-to-SQL with rsyslog-0.8.4 on FreeBSD 5.4 Rsyslog is available from http://www.monitorware.com/rsyslog/. Su to root and install the mysql41-client before installing rsyslog. Step 1: Configure/Fix Makefile Line 15: #CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce Line 16: CFLAGS= $(RPM_OPT_FLAGS) -O3 -DSYSV -fomit-frame-pointer -Wall -fno-strength-reduce -DWITH_DB Line 24: LIBS = -L/usr/local/lib/mysql -lmysqlclient #/var/lib/mysql/mysql #add -L/usr/local/lib/mysql Step 2: Fix syslogd.c Line 593: #include "/usr/local/include/mysql/mysql.h" Line 594: #include "/usr/local/include/mysql/errmsg.h" Step 3: # make install clean Step 4: Copy/Configure/Fix rsyslog.conf. Copy sample.conf to /etc/rsyslog.conf and configure appropriately. Line 178: *.* >hostname,dbname,userid,password; #add semi-colon Step 5: Create MySQL table with createDB.sql. Step 6: Kill syslogd and start rsyslogd. # kill [pid] # /usr/sbin/rsyslogd Step 7: Configure /etc/rc.conf to disable syslogd. Add Line: syslogd_enable="no" Step 8: Start rsyslogd at boot-time. I'm not sure how to do this yet. Help Resources: # man rsyslog.conf # man rsyslogd From rgerhards at hq.adiscon.com Tue May 31 09:01:50 2005 From: rgerhards at hq.adiscon.com (Rainer Gerhards) Date: Tue, 31 May 2005 09:01:50 +0200 Subject: [rsyslog] other syslogd Message-ID: <577465F99B41C842AAFBE9ED71E70ABA0621BA@grfint2.intern.adiscon.com> Hi Dennis, no, rsyslogd does *NOT* at all interfer with standard syslogd. The only relationship is the syslog listen port (514). As only one process can listen on it, rsyslogd startup will fail when syslogd runs and vice versa. The idea is that you disable stock syslogd before you start rsyslogd. Rainer > -----Original Message----- > From: rsyslog-bounces at lists.adiscon.com > [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Dennis Olvany > Sent: Tuesday, May 31, 2005 2:21 AM > To: rsyslog at lists.adiscon.com > Subject: [rsyslog] other syslogd > > I'm trying to understand this. When rsyslogd starts, it kills > syslogd? I killed syslogd manually and now just have rsyslogd > running and it seems to be working just fine. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > From dennisolvany at gmail.com Tue May 31 20:43:33 2005 From: dennisolvany at gmail.com (Dennis Olvany) Date: Tue, 31 May 2005 13:43:33 -0500 Subject: [rsyslog] syslogd and rsyslogd together Message-ID: <000e01c56610$a693ef70$0366a8c0@d> Syslogd and rsyslogd didn't seem to play well together on my system. I had some debugging output, but I don't recall precisely what it said and I didn't save it. I didn't think rsyslogd would bind to 514 by default, would it? I think I will try and reenact the scenario.