I finally got my syslog-ng servers to pass logs to the MySQL db, but was having some problems getting LogAnalzyer to access the db. I re-installed Log Analyzer but now I am getting an access denied error: Connection to the database server failed. Access denied for user 'syslog'@'FQDN_for_mysql_server.com' (using password: YES).
Here is the output of the grants for the 'syslog' user:
CODE: SELECT ALL
mysql> show grants for 'syslog'@'FQDN_for_mysql_server.com';+------------------------------------------------------------------------------------+| Grants for syslog@FQDN_for_mysql_server.com |+------------------------------------------------------------------------------------+| GRANT USAGE ON *.* TO 'syslog'@'FQDN_for_mysql_server.com' || GRANT ALL PRIVILEGES ON `Syslog`.* TO 'syslog'@'FQDN_for_mysql_server.com' |+------------------------------------------------------------------------------------+2 rows in set (0.00 sec)
And here is what my config.php looks like:
$CFG['DefaultSourceID'] = 'Source1';
$CFG['Sources']['Source1']['ID'] = 'Source1';
$CFG['Sources']['Source1']['Name'] = 'Syslog';
$CFG['Sources']['Source1']['ViewID'] = 'SYSLOG';
$CFG['Sources']['Source1']['SourceType'] = SOURCE_DB;
$CFG['Sources']['Source1']['DBTableType'] = 'syslogng';
$CFG['Sources']['Source1']['DBType'] = DB_MYSQL;
$CFG['Sources']['Source1']['DBServer'] = 'ustc-mysql';
$CFG['Sources']['Source1']['DBName'] = 'Syslog';
$CFG['Sources']['Source1']['DBUser'] = 'syslog';
$CFG['Sources']['Source1']['DBPassword'] = 'pTRl819ELI0viRmXaEUO';
$CFG['Sources']['Source1']['DBTableName'] = 'SystemEvents';
$CFG['Sources']['Source1']['DBEnableRowCounting'] = false;
Thanks,
James McDonald
System Administrator
RHCSA, Security+