Senthil, I don't know if you got your answer off-list, here goes anyway...
The problem lies here: ======23 $template FILENAME,"/logs/syslog/%fromhost-ip%/messages-%$YEAR%-%$MONTH%-%$DAY%.log"
24 *.* ?FILENAME >>25 &~ ======After logging all messages to /logs/syslog/%fromhost-ip%/messages-%$YEAR%-%$MONTH%-%$DAY%.log, you discard them.
So, as far as rsyslog is concerned, there is nothing to store by the time the following is reached:
======34 $template SystemEvents,"insert into SystemEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (\'%msg%\', %syslogfacility%, \'%HOSTNAME%\', %syslogpriority%, \'%timereported:::date-mysql%\', \'%timegenerated:::date-mysql%\', %iut%, \'%syslogtag%\')",SQL 35 #*.info;mail.none;authpriv.none;cron.none :ommysql:localhost,rsysdb,rsysdb,dlb@1234
>>36 *.* :ommysql:127.0.0.1,rsysdb,rsysdb,dlb@1234 ====== Delete line 25 and it should work. Ariel Poliak Network and Security Operations HostDime.com, Inc. On 2014-03-04 04:08, senthil velan wrote:
Dear David , Thanks for the reply.I am forwarding the rsyslog.conf file .KIndly look in to this.I am not storing the messages in /var/log directory.I am storing in different folder /logs/syslog.Whether this will have an effect ? With regards, M.Senthil Velan, From: David Lang <[email protected]> To: rsyslog-users <[email protected]> Date: 04-03-14 02:06 PM Subject: Re: [rsyslog] rsyslog forwarding to mysql DB issue Sent by: [email protected] On Tue, 4 Mar 2014, senthil velan wrote:Dear all , I configured centralised log server in CENT OS 6.4 using rsyslog-5.8.10-8.el6.x86_64 .Now logs are getting pushed to the server.When I try to forward to Mysql database server ,logs are not inserted in the Database. I configured loganalyzer also. Due to thisissuewhen I log in to the web page ,it says no syslog found. Any idea whereitwent wrong.Any help in this issue.Mysql DB version mysql-5.1.73-3.el6_5.x86_64well, without configs or errors, there's nothing that anyone is going to be able to do. check to see if mysql is having errors, check to see if rsyslog is having errors inserting into the database (start it with -d -n to see the very verbose debug output) It's probably something wrong with your database schema, your template for inserting into the database, or the login credentials. David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. The information contained in this e-mail and any attachment herein is confidential and privileged, belonging to the Dhanlaxmi Bank Ltd and is intended solely for the use of the intended recipient/addressee(s). Access, copying or re-use of the e-mail or any attachment or any information herein, by any other person is not authorized. If you are not the intended person/addressee(s) or have received this e-mail in error, please return this e-mail to the sender and delete it from your computer/system. Internet communications are not guaranteed to be secured or virus free. Although we attempt to sweep e-mail and attachments for virus, we do not guarantee that either are virus free and accept no liability for any damage or loss as a result of virus or from unauthorized access/usage. Any opinion or other information in this e-mail or its attachments that does not relate to the business of the Dhanlaxmi Bank Ltd is personal to the sender and is not given or endorsed by the Dhanlaxmi Bank Ltd." _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
