Syslog monitor addon beta

[bidzer]

Is there anyway to have syslog translate the IP when a syslog message is received? Is it possible to use the hosts table? I don't see any way of doing this. Any help is greatly appreciated!!!

[spoonman]

If your using Syslog-ng >>>
Syslog-ng.conf
-----------------

options {
sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no); <<<< change to yes and restart service
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};

[bidzer]

Thanks for your reply!!!

I'm using the loopback interfaces as the source interfaces and those aren't in DNS. I have a hosts file on the box. Can I point syslog-ng to query the host table?

[spoonman]

Sounds like that's your only option...hosts file.

[bidzer]

I don't see any option to do it unless maybe there's a hack around.

[bidzer]

I finally got it to work. I had to add these 3 lines to my syslog-ng.conf file:

options {
use_dns(yes);
dns_cache(yes);
dns_cache_size(200);

This is awesome!!

[bmarofsky]

I am having trouble getting the colors of the highlighting to show.
I have this in my config.php in the syslog plugin directory:

// Background colors, change/add/delete to suit
// Not all these are necessary, they are according to the messages in your DB
$syslog_colors['Emerg'] = 'FF0000';
$syslog_colors['Critical'] = 'FFD700';
$syslog_colors['Notice'] = '0000FF';
$syslog_colors['Info'] = '7FFF00';
$syslog_colors['Debug'] = '808080';

$syslog_colors['alert'] = 'FF8C00';
$syslog_colors['err'] = 'A52A2A';
$syslog_colors['crit'] = 'FFD700';
$syslog_colors['warn'] = '9932CC';
$syslog_colors['notice'] = '0000FF';
$syslog_colors['info'] = '7FFF00';
$syslog_colors['debug'] = '808080';

Does the text in ' ' need to match exactly with the text in the priority field of my database or can I use wild cards?

Thanks,

[TheWitness]

Brian,

With Jimmy's assistance, there is something nice cooking up in the Cacti Group's SVN at the moment. I will add this to the list of enhancements.

To answer your question, my guess is that it's pretty stupid.

TheWitness

[bmarofsky]

I'm a little groggy in the AM. So what does that mean? Is the highlighting a feature that does or does not work?

[noflies]

It currently needs to match.
In my infinite lazyness, I created this SNIPPET for my <cacti_path>/plugins/syslog/config.php

[TheWitness]

This should be controlled either through CSS, or via a user interface. That's what I was talking about.

TheWitness

[bmarofsky]

I tried yours and it didn't work either.

Could the problem be that the LEVEL column is displaying a combined Facility.Level value?

[bmarofsky]

[bmarofsky]

I got it! Kiwi's mapping was wrong. I had priority mapped to priority instead of level.

Looks great!

[mcutting]

Hi bmarofsky,

Could you explain your mapping settings in KIWI please ?

Thanks