<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">Hi all, <br>
<br>
What is the best practice for storing all those logs in one
central environment. I have one Linux Box running Syslog-NG with
LogAnalyzer and MongoDB ( for now ), and is the best way to
configure and use it with MongoDB or with MariaDB ( MySQL ) ? I
have once install MySQL but it was getting very slow as the logs
getting bigger and bigger ( for one week ). <br>
Now i have done with MongoDB ( still testing ) but i have problem
as LogAnalyzer does not show me the real pictures, i have no Date
info, no Facility, no serverity, Hosts, syslogtag, i just have
ProcessID. <br>
<br>
Any hints on this ?<br>
<br>
I have the following configuration on the syslog-ng.cfg:<br>
<br>
destination d_mongodb {<br>
mongodb(<br>
servers("localhost:27017")<br>
database("logs")<br>
# uri('mongodb://localhost/syslog-ng')<br>
collection("syslog")<br>
value-pairs(<br>
scope("selected-macros" "nv-pairs" "sdata")<br>
)<br>
);<br>
};<br>
<br>
Kind regards<br>
Ivan<br>
</font>
</body>
</html>