Syslog-ng mysql php

Syslog-ng web gui

• configurare syslog-ng in modo da scrivere i log in mysql

http://plone.jcu.edu.au/hpc/staff/projects/php-syslog-ng/configuration-of-syslog-ng/

• installare php-syslog-ng da http://code.google.com/p/php-syslog-ng/downloads/list

• Se utilizzate syslog-ng aggiungere le seguenti righe a /etc/syslog-ng/syslog-ng.conf

destination d_mysql { program("/usr/bin/mysql --user=syslogfeeder --password=XXXXXXXXX syslog < /var/log/mysql.pipe");
   pipe("/var/log/mysql.pipe"
   template("INSERT INTO logs (host,facility,priority,level,tag,datetime,program,msg,seq)
   VALUES ('$HOST','$FACILITY','$PRIORITY','$LEVEL','$TAG','$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC','$PROGRAM','$MSG','$SEQ');\n")
   template-escape(yes)); };

log {
   source(s_all);
   destination(d_mysql);
};

• Se invece si utilizza rsyslog, aggiungere in /etc/rsyslog.conf

$ModLoad ommysql
*.*       :ommysql:database-server,database-name,database-userid,database-password



$template syslog-ng,"insert into logs(host, facility, priority, tag, date, time, msg) values ('%HOSTNAME%', %syslogfacility%, %syslogpriority%, '%syslogtag%',  '%timereported:::date-mysql%', '%timereported:::date-mysql%', '%msg%')", SQL
*.*             :ommydb:mysql-server,syslog,user,pass;syslog-ng

Reference: http://www.rsyslog.com/doc-rsyslog_php_syslog_ng.html