I finally got my syslog-ng servers to pass logs to the MySQL db, but was having some problems getting LogAnalzyer to access the db. I re-installed Log Analyzer but now I am getting an access denied error: Connection to the database server failed. Access denied for user 'syslog'@'FQDN_for_mysql_server.com' (using password: YES). Here is the output of the grants for the 'syslog' user: CODE: <http://kb.monitorware.com/> SELECT ALL mysql> show grants for 'syslog'@'FQDN_for_mysql_server.com'; +--------------------------------------------------------------------------- ---------+ | Grants for syslog@FQDN_for_mysql_server.com | +--------------------------------------------------------------------------- ---------+ | GRANT USAGE ON *.* TO 'syslog'@'FQDN_for_mysql_server.com' | | GRANT ALL PRIVILEGES ON `Syslog`.* TO 'syslog'@'FQDN_for_mysql_server.com' | +--------------------------------------------------------------------------- ---------+ 2 rows in set (0.00 sec) And here is what my config.php looks like: $CFG['DefaultSourceID'] = 'Source1'; $CFG['Sources']['Source1']['ID'] = 'Source1'; $CFG['Sources']['Source1']['Name'] = 'Syslog'; $CFG['Sources']['Source1']['ViewID'] = 'SYSLOG'; $CFG['Sources']['Source1']['SourceType'] = SOURCE_DB; $CFG['Sources']['Source1']['DBTableType'] = 'syslogng'; $CFG['Sources']['Source1']['DBType'] = DB_MYSQL; $CFG['Sources']['Source1']['DBServer'] = 'ustc-mysql'; $CFG['Sources']['Source1']['DBName'] = 'Syslog'; $CFG['Sources']['Source1']['DBUser'] = 'syslog'; $CFG['Sources']['Source1']['DBPassword'] = 'pTRl819ELI0viRmXaEUO'; $CFG['Sources']['Source1']['DBTableName'] = 'SystemEvents'; $CFG['Sources']['Source1']['DBEnableRowCounting'] = false; Thanks, James McDonald System Administrator RHCSA, Security+ jmcdonald@lce.com
Shouldn't 'FQDN_for_mysql_server.com' be IP/Hostname of the server initiating connection and not the mysql server itself ? Saggu On Mon, Sep 10, 2012 at 10:54 PM, James McDonald <jmcdonald@lce.com> wrote:
I finally got my syslog-ng servers to pass logs to the MySQL db, but was having some problems getting LogAnalzyer to access the db. I re-installed Log Analyzer but now I am getting an access denied error: Connection to the database server failed. Access denied for user 'syslog'@'FQDN_for_mysql_server.com' (using password: YES).
Here is the output of the grants for the 'syslog' user:
****
*CODE: SELECT ALL <http://kb.monitorware.com/>*
mysql> show grants for 'syslog'@'FQDN_for_mysql_server.com';
+------------------------------------------------------------------------------------+ | Grants for syslog@FQDN_for_mysql_server.com |
+------------------------------------------------------------------------------------+ | GRANT USAGE ON *.* TO 'syslog'@'FQDN_for_mysql_server.com' | | GRANT ALL PRIVILEGES ON `Syslog`.* TO 'syslog'@'FQDN_for_mysql_server.com' |
+------------------------------------------------------------------------------------+ 2 rows in set (0.00 sec)****
And here is what my config.php looks like:
$CFG['DefaultSourceID'] = 'Source1';
$CFG['Sources']['Source1']['ID'] = 'Source1'; $CFG['Sources']['Source1']['Name'] = 'Syslog'; $CFG['Sources']['Source1']['ViewID'] = 'SYSLOG'; $CFG['Sources']['Source1']['SourceType'] = SOURCE_DB; $CFG['Sources']['Source1']['DBTableType'] = 'syslogng'; $CFG['Sources']['Source1']['DBType'] = DB_MYSQL; $CFG['Sources']['Source1']['DBServer'] = 'ustc-mysql'; $CFG['Sources']['Source1']['DBName'] = 'Syslog'; $CFG['Sources']['Source1']['DBUser'] = 'syslog'; $CFG['Sources']['Source1']['DBPassword'] = 'pTRl819ELI0viRmXaEUO'; $CFG['Sources']['Source1']['DBTableName'] = 'SystemEvents'; $CFG['Sources']['Source1']['DBEnableRowCounting'] = false;****
** **
** **
Thanks,****
James McDonald****
System Administrator****
RHCSA, Security+****
jmcdonald@lce.com****
** **
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Regards, Sagar Naravane
If the apache (hosting .php) and mysql reside on same machine.. try with "localhost" rather than the fqdn :) Saggu On Tue, Sep 11, 2012 at 10:43 AM, sagar naravane <sagar.naravane@gmail.com>wrote:
Shouldn't 'FQDN_for_mysql_server.com' be IP/Hostname of the server initiating connection and not the mysql server itself ?
Saggu
On Mon, Sep 10, 2012 at 10:54 PM, James McDonald <jmcdonald@lce.com>wrote:
I finally got my syslog-ng servers to pass logs to the MySQL db, but was having some problems getting LogAnalzyer to access the db. I re-installed Log Analyzer but now I am getting an access denied error: Connection to the database server failed. Access denied for user 'syslog'@'FQDN_for_mysql_server.com' (using password: YES).
Here is the output of the grants for the 'syslog' user:
****
*CODE: SELECT ALL <http://kb.monitorware.com/>*
mysql> show grants for 'syslog'@'FQDN_for_mysql_server.com';
+------------------------------------------------------------------------------------+ | Grants for syslog@FQDN_for_mysql_server.com |
+------------------------------------------------------------------------------------+ | GRANT USAGE ON *.* TO 'syslog'@'FQDN_for_mysql_server.com' | | GRANT ALL PRIVILEGES ON `Syslog`.* TO 'syslog'@'FQDN_for_mysql_server.com' |
+------------------------------------------------------------------------------------+ 2 rows in set (0.00 sec)****
And here is what my config.php looks like:
$CFG['DefaultSourceID'] = 'Source1';
$CFG['Sources']['Source1']['ID'] = 'Source1'; $CFG['Sources']['Source1']['Name'] = 'Syslog'; $CFG['Sources']['Source1']['ViewID'] = 'SYSLOG'; $CFG['Sources']['Source1']['SourceType'] = SOURCE_DB; $CFG['Sources']['Source1']['DBTableType'] = 'syslogng'; $CFG['Sources']['Source1']['DBType'] = DB_MYSQL; $CFG['Sources']['Source1']['DBServer'] = 'ustc-mysql'; $CFG['Sources']['Source1']['DBName'] = 'Syslog'; $CFG['Sources']['Source1']['DBUser'] = 'syslog'; $CFG['Sources']['Source1']['DBPassword'] = 'pTRl819ELI0viRmXaEUO'; $CFG['Sources']['Source1']['DBTableName'] = 'SystemEvents'; $CFG['Sources']['Source1']['DBEnableRowCounting'] = false;****
** **
** **
Thanks,****
James McDonald****
System Administrator****
RHCSA, Security+****
jmcdonald@lce.com****
** **
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Regards,
Sagar Naravane
-- Regards, Sagar Naravane
Does the Server 2008 machine that I am using to access the MySQL db need some sort of client installed on it? Or some kind of authentication module? I only ask because I tried to telnet from MS-DOS, to verify connectivity and got a response that seemed to suggest it wasn't being allowed. From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of sagar naravane Sent: Tuesday, September 11, 2012 1:13 AM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] Syslog-NG/Log Analyzer Shouldn't 'FQDN_for_mysql_server.com' be IP/Hostname of the server initiating connection and not the mysql server itself ? Saggu On Mon, Sep 10, 2012 at 10:54 PM, James McDonald <jmcdonald@lce.com> wrote: I finally got my syslog-ng servers to pass logs to the MySQL db, but was having some problems getting LogAnalzyer to access the db. I re-installed Log Analyzer but now I am getting an access denied error: Connection to the database server failed. Access denied for user 'syslog'@'FQDN_for_mysql_server.com' (using password: YES). Here is the output of the grants for the 'syslog' user: CODE: <http://kb.monitorware.com/> SELECT ALL mysql> show grants for 'syslog'@'FQDN_for_mysql_server.com'; +--------------------------------------------------------------------------- ---------+ | Grants for syslog@FQDN_for_mysql_server.com | +--------------------------------------------------------------------------- ---------+ | GRANT USAGE ON *.* TO 'syslog'@'FQDN_for_mysql_server.com' | | GRANT ALL PRIVILEGES ON `Syslog`.* TO 'syslog'@'FQDN_for_mysql_server.com' | +--------------------------------------------------------------------------- ---------+ 2 rows in set (0.00 sec) And here is what my config.php looks like: $CFG['DefaultSourceID'] = 'Source1'; $CFG['Sources']['Source1']['ID'] = 'Source1'; $CFG['Sources']['Source1']['Name'] = 'Syslog'; $CFG['Sources']['Source1']['ViewID'] = 'SYSLOG'; $CFG['Sources']['Source1']['SourceType'] = SOURCE_DB; $CFG['Sources']['Source1']['DBTableType'] = 'syslogng'; $CFG['Sources']['Source1']['DBType'] = DB_MYSQL; $CFG['Sources']['Source1']['DBServer'] = 'ustc-mysql'; $CFG['Sources']['Source1']['DBName'] = 'Syslog'; $CFG['Sources']['Source1']['DBUser'] = 'syslog'; $CFG['Sources']['Source1']['DBPassword'] = 'pTRl819ELI0viRmXaEUO'; $CFG['Sources']['Source1']['DBTableName'] = 'SystemEvents'; $CFG['Sources']['Source1']['DBEnableRowCounting'] = false; Thanks, James McDonald System Administrator RHCSA, Security+ jmcdonald@lce.com ____________________________________________________________________________ __ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq -- Regards, Sagar Naravane
participants (2)
-
James McDonald
-
sagar naravane