[rsyslog-notify] Forum Thread: Rsyslog to MySql (UBUNTU) - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Tue Feb 23 15:32:32 CET 2016
User: cornelp
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26359#p26359
Message:
----------
Hello. So Im trying to get rsyslog to send all logs to MySQL database, so
that I can show the data thru LogAnalyzer.
LogAnalyzer works properly, as I can see the start and stop of rsyslog
details.
My problem is with rsyslog to MySQL. I don't think it sends the logs to the
database, cause when I try to query the database, it only shows the start
and stop log from rsyslog, nothing else. I have 4 Cisco devices pointing
its logs to my rsyslog server but no data is shown in the database.
Here is what I have:
rsysloc.conf in /etc/ folder:
# /etc/rsyslog.conf Configuration file for rsyslog.
#
# For more information see
# /usr/share/doc/rsyslog-doc/html/rsyslog_conf.html
#
# Default logging rules can be found in /etc/rsyslog.d/50-default.conf
#################
#### MODULES ####
#################
#$ModLoad imuxsock # provides support for local system logging
#$ModLoad imklog # provides kernel logging support
#$ModLoad immark # provides --MARK-- message capability
# provides UDP syslog reception
#$ModLoad ommysql
#$ModLoad imudp
#$UDPServerRun 514
# provides TCP syslog reception
#$ModLoad imtcp
#$InputTCPServerRun 514
# Enable non-kernel facility klog messages
$KLogPermitNonKernelFacility on
###########################
#### GLOBAL DIRECTIVES ####
###########################
#
# Use traditional timestamp format.
# To enable high precision timestamps, comment out the following line.
#
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# Filter duplicated messages
$RepeatedMsgReduction on
#
# Set the default permissions for all log files.
#
#$FileOwner syslog
#$FileGroup adm
#$FileCreateMode 0640
#$DirCreateMode 0755
#$Umask 0022
#$PrivDropToUser syslog
#$PrivDropToGroup syslog
#
# Where to place spool and state files
#
#$WorkDirectory /var/spool/rsyslog
#
MySQL.conf file under /etc/rsysog.d/ folder
### Configuration file for rsyslog-mysql
### Changes are preserved
$ModLoad ommysql
*.* :ommysql:192.168.10.1,Syslog,sysloguser,Password1
What am I missing besides these config files? Am I supposed to edit any
other file or????
Thanks...
More information about the rsyslog-notify
mailing list