Syslog monitor addon beta

Lcd · Joined: 27 Mar 2007 Posts: 6

Hi all

It's a great plugin but i have a problem ^^

When it is activated i have a php process wich is launched a bit after the polling cycle wich discuss with the mysqld daemon (i suppose because the mysqld grows in ressources too).
And it does it without end and takes all the server ressources....
Moreover, this php process is recalled after each polling cycle...so i find myself with 4,5,6....process taking all the ressources....

I'm not sure of the script that does it but it seem's to me that i saw the syslog_process.php name....

The database is filled in by syslog-ng and i have no problems with it

So if anyone have an idea about it it would be great ^^

Lcd · Joined: 27 Mar 2007 Posts: 6

Hi

So i finally found the problem.
I was calling another database so the php script couldn't fill in the good columns and was working without end

Thanks for this plugins

exploit-soget · Joined: 23 Jan 2007 Posts: 40

I have a problem with this plugin.
I think i doesn't have understand how it works but i wish you can help me.
I have some servers in Cacti but in the syslogs plugin, i see only the syslog message of my local server.
Why i can't see the other server ?

I have installed Cacti with the last cactiEz cd and make some upgrade.

Some infos :

[root@cacti cacti]# ps -eaf | grep syslog
root 2519 1 0 Nov21 ? 00:00:00 /bin/bash /sbin/syslogtomysql
root 2523 2519 0 Nov21 ? 00:00:05 mysql -u cactiuser --password=x xxxxxxxxx syslog
root 2524 1 0 Nov21 ? 00:00:19 syslog-ng
root 4019 28398 0 17:18 pts/0 00:00:00 grep syslog

nahun · Cacti User Joined: 15 Feb 2006 Posts: 92 Location: Idaho

Is your syslog-ng listening on a network interface? Maybe post your syslog-ng config

cigamit · Posted: Wed Dec 05, 2007 12:07 pm Post subject:

Are your other servers set to send the syslogs to the Cacti server?

exploit-soget · Joined: 23 Jan 2007 Posts: 40

I think my other servers was not set to send the syslogs to the Cacti server.
How can i do it ?

My syslog-ng.conf was in attachment.

kurowsky · Joined: 04 Feb 2004 Posts: 46 Location: Richmond, VA.

If your other servers are also using syslog-ng you'll need another destination defining your remote syslog server and either include it in a current log statement or create another one. I just included it in a current one for the syslog messages.

Example: where x.x.x.x is the ip of your server

r_chetanjain · Cacti User Joined: 22 Aug 2003 Posts: 70

I am using the Syslog plugin from cactiusers.org...I am not able to view any messages in cacti...

Syslog-ng.conf
-----------------

options {
sync (0);
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (no);
keep_hostname (yes);
};

#source s_sys {
# file ("/proc/kmsg" log_prefix("kernel: "));
# unix-stream ("/dev/log");
# internal();
# udp(ip(0.0.0.0) port(514));
# };

source net { udp(); };

destination d_mysql {
pipe("/var/log/mysql.pipe"
template("INSERT INTO syslog_incoming
(facility, priority, date, time, host, message, seq, status)
VALUES ( '$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$HOST', '$MSG', '$SEQ', '$STATUS' );\n") template-escape(yes));
};

destination messages { file("/var/log/messages"); };
destination kern { file("/var/log/kern.log"); };

log { source(net); destination(d_mysql); };
--------------------------------------------------------------------------------
My script

#!/bin/bash

if [ -e /var/log/mysql.pipe ]; then
while [ -e /var/log/mysql.pipe ]
do
mysql -u syslog --password=cooler syslog < /var/log/mysql.pipe
done
else
mkfifo /var/log/mysql.pipe
fi

--------------------------------------------------------------------------------

Output of /var/log/mysql.pipe

INSERT INTO syslog_incoming
(facility, priority, date, time, host, message, seq, status)
VALUES ( 'local6', 'info', '2007-12-08', '12:10:47', '10.115.1.2', 'USER: admin logged in through telnet (10.4.114.16)', '', '' );
INSERT INTO syslog_incoming
(facility, priority, date, time, host, message, seq, status)
VALUES ( 'local6', 'info', '2007-12-08', '12:10:51', '10.115.1.2', 'SYST: 10.4.114.16 admin: clear counters', '', '' );
------------------------------------------------------------------------------

But i can't view any messages in Mysql andCacti... But when i just paste the Insert rule in Mysql manually with the same credentials, the table gets updates and i can see message in Cacti...

I think some issue with the PIPE...

Can you put some light

Chetan

MatsB · Cacti User Joined: 10 Jan 2006 Posts: 50

Just installed this great plugin. I got one problem though.
I get this error in Cacti:

Warning: mysql_pconnect() [function.mysql-pconnect]: Access denied for user 'haloe'@'localhost' (using password: YES) in /usr/share/php/adodb/drivers/adodb-mysql.inc.php on line 376

I've done all the steps as discribed in the readme file.
mysql -u root -p haloe
GRANT ALL ON haloe.* TO haloeuser@localhost IDENTIFIED BY 'mypassword';
GRANT ALL ON haloe.* TO cactiuser@localhost IDENTIFIED BY 'mypassword';
flush privileges;

Then I changed $haloedb_password in haloe-config.php to match the username and password from the previous step.

$haloedb_type = "mysql";
$haloedb_default = "haloe";
$haloedb_hostname = "localhost";
$haloedb_username = "haloe";
$haloedb_password = "mypassword";

chrisgapske · Posted: Sat Dec 08, 2007 5:26 pm Post subject:

Maybe I am tired and sick but I think your problem is that you did this for

GRANT ALL ON haloe.* TO haloeuser@localhost IDENTIFIED BY 'mypassword';

When it should have been GRANT ALL ON haloe.* TO haloe@localhost IDENTIFIED BY 'mypassword';

Or Change your password config to look like this .
$haloedb_type = "mysql";
$haloedb_default = "haloe";
$haloedb_hostname = "localhost";
$haloedb_username = "haloeuser";
$haloedb_password = "mypassword";

It just looks like you got your username for the database wrong no worries.

MatsB · Cacti User Joined: 10 Jan 2006 Posts: 50

Thx chrisgapske,

Must have been tiered to when I did this last night.

spoonman · Cacti User Joined: 03 May 2005 Posts: 243

Anyone using the 5.2 version of syslog and have added the line dividers between each entry? I see the code back on about page 9 but its for an earlier version of haloe... Code had changed alittle....Just curious if this is an interest to anyone else?? It seems very nice to me to have a line between each syslog message? Anyway if someone has it working can they post the code snipet?

Thanks

nahun · Cacti User Joined: 15 Feb 2006 Posts: 92 Location: Idaho

its been a while and I'm using 5.1, but I think it would be the same.

At line 229 on my syslog.php there is a foreach loop. All I added was the CSS to add border-bottom (I think at least, like I said it was a while ago). Here is what the loop looks like for me:

pconrad · Joined: 12 Jun 2006 Posts: 14

When I change the syslog_text_color to anything other than "", the associated background color goes away.
This is not too big an issue until I use a darker color for the background. Black doesn't show up too well on blue.