Dunno if this has anything to do with it but is syslog-ng running as it's own user? If so it might have a difficult time writing to that pipe.
On 8/30/07, Josh Henry <[EMAIL PROTECTED]> wrote: > > I should have mentioned this in the beginning, I'm running CentOS 5 (all > updates done), SELinux is off, syslog-ng v2.0.4-1, php v5.1.6-12.el5, and > mysql v5.0.22-2.1 . > > drwxr-xr-x 22 root root 4096 Aug 28 09:24 var > drwxr-xr-x 13 root root 4096 Aug 29 15:57 log > prw-r--r-- 1 root root 0 Aug 29 11:46 mysql.pipe > > That is the default permissions on a pipe file when it's created. I get > the same "Aug 23 14:53:31 syslog syslog-ng[25152]: Error opening file for > writing; filename='/tmp/mysql.pipe', error='Permission denied (13)'" error > with default permissions then with opened right up permissions. > > Thanks. > > > Julio Cesar Sá wrote: > > > > HEY! > > > > Are you using SELinux?? > > > > The AppArmor configuration from SUSE prevents the system from opening the > pipe, and so you get this error!! > > > > If you are, try to disable AppArmor > > > > Cheerz! > > > > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of Clayton Dukes > Sent: quarta-feira, 29 de agosto de 2007 17:31 > To: Edward Brookhouse > Cc: Josh Henry; > php-syslog-ng-support@lists.sourceforge.net > Subject: Re: [Php-syslog-ng-support] php-syslog-ng causing 100% cpu usage?! > > > > Also, be sure to read the docs at: > http://code.google.com/p/php-syslog-ng/ > > > > > On 8/29/07, Edward Brookhouse <[EMAIL PROTECTED]> wrote: > > Hi Josh, > > I would start with using the latest version of php-syslog-ng from > http://freshmeat.net/redir/php-syslog-ng/33874/url_tgz/current.tgz > > The instructions you were following look ok, but I am curious you > mention below /tmp/mysql.pipe in one place, but /var/log/mysql.pipe > (which is the default php-syslog-ng location) in another. Which are you > using? > > I would bet that the issue is syslog-ng talking to sql (via the pipe). > > Double check your pipe is setup correctly, or that you have changed the > script that sends the syslog data into the pipe. ( syslog2mysql.sh) > > HTH > > Edward > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto: > [EMAIL PROTECTED] On > Behalf > Of Josh Henry > Sent: Wednesday, August 29, 2007 1:25 PM > To: php-syslog-ng-support@lists.sourceforge.net > Subject: [Php-syslog-ng-support] php-syslog-ng causing 100% cpu usage?! > > Hey all, I'm still quite a newb to Linux so go easy on me. > > I've been able to get syslog-ng working on my central logging server and > > I wanted to try to get the php-syslog-ng going on it. I was following > the steps outlined here -> > http://www.openmaniak.com/syslog_tutorial.php > > and I'm at restarting the server. > > If I have: > > > destination d_mysql { pipe("/var/log/mysql.pipe" > template("INSERT INTO logs (host, facility, priority, level, tag, > datetime, program, msg) > VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', > '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n") > template-escape(yes)); > }; > > log { source(s_sys); destination(d_mysql); }; > > > in the syslog-ng.conf file the CPU usage for syslog-ng goes between 99% > and 100% and never drops. If I take that set of lines out the CPU usage > for syslog-ng goes not much higher then 0%. > > What am I doing wrong for getting that to work? I would like to see what > > the front end looks like as there is reporting and such involved with it > > which is good stuff. > > I found out why it's causing 100% CPU usage but I still don't know why > it's causing this problem: > > **The error in the logs about a million times. > Aug 24 10:08:04 syslog.domain.com syslog-ng[28715]: Error opening file > for writing; filename='/tmp/mysql.pipe', error='Permission denied (13)' > > **The permissions of /tmp/mysql.pipe > prwxrwxrwx 1 root root 0 Aug 24 09:40 mysql.pipe > > I even opened the permissions on the /tmp dir right up but no change. > Can anyone help me with this one? > > Thanks. > > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > > _______________________________________________ > Php-syslog-ng-support mailing list > Php-syslog-ng-support@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/php-syslog-ng-support > > -- Robert Perriero [EMAIL PROTECTED] ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Php-syslog-ng-support mailing list Php-syslog-ng-support@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/php-syslog-ng-support
