Syslog Removal Rule Filters issue

Announcements concerning Plugins for Cacti

Moderators: Moderators, Developers

Post Reply
Author
Message
sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Syslog Removal Rule Filters issue

#1 Post by sharekhan » Mon Jun 11, 2012 4:06 am

Hi Sir ,

How do i create rule for syslog message ,

using Syslog 1.22 .

I had created but it is not working , do i am doing any wrong, i had attached the screenshot of created removals rule .

pls help how the removals rule can be created.
Attachments
syslog2.JPG
syslog2.JPG (88.36 KiB) Viewed 6298 times
Syslog1.JPG
Syslog1.JPG (101.46 KiB) Viewed 6298 times
Syslog.JPG
Syslog.JPG (135.48 KiB) Viewed 6298 times

JohnYYC
Cacti User
Posts: 58
Joined: Thu Apr 22, 2010 1:23 pm

Re: Syslog Removal Rule Filters issue

#2 Post by JohnYYC » Mon Jun 11, 2012 5:23 am

Change "String Match Type" to "Contains". That should do the trick.

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#3 Post by sharekhan » Mon Jun 11, 2012 6:56 am

Hi sir ,

I had change the setting as per said , but no success

Even i had change one by one String Match Type , for message removals

still i cant able to remove the messages , and the logs are coming heavy.

pls help....

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#4 Post by sharekhan » Tue Jun 12, 2012 3:38 am

sir pls help.

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#5 Post by sharekhan » Fri Jun 15, 2012 4:04 am

sir pls help

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#6 Post by sharekhan » Fri Jun 29, 2012 1:35 am

Hi sir ,

I had done the process as you said , but no success . pls help me how to do .
Change "String Match Type" to "Contains"

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#7 Post by sharekhan » Wed Sep 05, 2012 4:43 am

Hi sir,

I am getting the error will applying Syslog Removal Rule Filters

09/05/2012 02:55:02 PM - CMDPHP: Poller[0] ERROR: A DB Exec Failed!, Error:'1064', SQL:"DELETE FROM `syslog`.`syslog_incoming` WHERE message LIKE '%'Connection from UDP'%' AND status='113''



Pls help :o

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#8 Post by sharekhan » Tue Feb 10, 2015 11:07 am

pls help to remove the syslog unwanted log.

i tried the Removal Rule Edit option with multiple String Match Type but its not working .after adding rule of removal then to the logs are not getting deleted from syslog.

i want help my server disk is getting full due to unwanted log of syslog.

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#9 Post by sharekhan » Fri Feb 13, 2015 2:40 pm

Syslog Removals problem

i am using sql string
facility='syslog' AND priority='Info' AND message='CMD'

then to the message are not deleting from syslog.

even no error in Cacti Log File

pls help.. to resolve the issue or share some trick to resolve it....

cigamit
Developer
Posts: 2780
Joined: Thu Apr 07, 2005 3:29 pm
Location: B/CS Texas
Contact:

Re: Syslog Removal Rule Filters issue

#10 Post by cigamit » Sat Feb 14, 2015 12:40 am

message='CMD'

so your saying the full syslog message you are wanting to remove is "CMD" and there is no other text in the message?

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#11 Post by sharekhan » Thu Jul 16, 2015 7:21 am

pls help to remove the syslog unwanted log.

i tried the Removal Rule Edit option with multiple String Match Type but its not working .after adding rule of removal then to the logs are not getting deleted from syslog.

i want help my server disk is getting full due to unwanted log of syslog.

Syslog Removals problem

i am using sql string
facility='syslog' AND priority='Info' AND message='CMD'

then to the message are not deleting from syslog.

even no error in Cacti Log File

pls help.. to resolve the issue or share some trick to resolve it....

sharekhan
Cacti User
Posts: 57
Joined: Mon Apr 04, 2011 10:47 am

Re: Syslog Removal Rule Filters issue

#12 Post by sharekhan » Thu Jul 16, 2015 7:27 am

i am using sql string
facility='syslog' AND priority='Info' AND message='(cacti) CMD (/usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1)'

Post Reply