[syslog-ng]Remote MySQL?

Asaf Maruf Ali syslog-ng@lists.balabit.hu
Thu, 15 Apr 2004 11:07:39 +0600


Hello.
We are using an excellent OSS tool with color coded event management. It is 
called php-syslog-ng and available at www.vermeer.org/syslog.

The tool provides excellent reporting and viewable on any machine on the 
network.

Best regards
Asaf Maruf
PING

On Thursday 15 April 2004 01:47, Michael Arndt wrote:
> Hello,
>
> i am as well interested in collcting syslogdata on a central loghost
> in a mysql database.
>
> two questions concerning this topic:
>
> has anyone build mysql or postgresqls report tools based on OSS tools
> or has feedback regarding this topic ?
>
> Is there a easy to use mechanism to get at
> least some routine queries / reports by a "GUI" ?
>
> SQL queries are not so encouraging to not-technical people
> (end users)
>
> has anyone hints about the size of logfile information
> he / she handles with MS SQL or postgres sql ?
>
> > Not at all. There are quite a few different methods for doing so, each
> > with its advantages and disadvantages.
> >
> > Many are linked right on syslog-ng's FAQ page
> > (http://www.campin.net/syslog-ng/faq.html#links):
> >
> >   http://vermeer.org/syslog/ (how to do it with a pipe to the mysql
> > command...the only command to change to make it remote is the "mysql"
> > command itself right at the bottom. Just add a "-h hostname.domain.tld"
> > to it)
> >   http://www.campin.net/newlogcheck.html (talks about how to do it buy
> > connecting with sqlsyslogd
> >   The example config at http://www.campin.net/syslog-ng.conf uses the
> > sqlsyslogs technique, as well.
> >   There's also a link to an example of how to do it by using a dropoff
> > directory. It's for postgresql, but can easily be adapted to mysql. The
> > link is dead now, but you can still see it through Archive.org's "Wayback
> > machine":
> > http://web.archive.org/web/20030622012230/http://www.umialumni.com/~ben/S
> >YSL OG-DOC.html
> >   Finally, there's a discussion, comparison, and examples of both of
> > these methods, as well a third, in the expanded example config at
> > http://www.campin.net/syslog-ng/expanded-syslog-ng.conf
> >
> > Any of these techniques can be used for remote SQL logging.
> >
> > Mike Nerone
> >
> > /* The only secure computer is one that is unplugged from the network --
> > and the wall. */
> >
> > <Activism>Did you know that our brilliant legislators recently (and
> > quietly) legalized spam? The law now says that anyone who wants to *can*
> > spam with no fear of punishment. They even named the law the "CAN SPAM"
> > Act. Read about it at http://www.cauce.org/news/index.shtml, then talk
> > about it with your congressman.</Activism>
> >
> > -----Original Message-----
> > From: syslog-ng-admin@lists.balabit.hu
> > [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Tony Karakashian
> > Sent: Monday, April 12, 2004 15:46
> > To: syslog-ng@lists.balabit.hu
> > Subject: [syslog-ng]Remote MySQL?
> >
> > I've looked through the docs and lists and it doesn't appear that this is
> > possible, so I'll ask: can I log from one machine to a MySQL server
> > running on another machine?  It appears I can only log to MySQL if it's
> > running on the same machine as syslog-ng.  Is that correct?
> >
> > Thanks,
> > -T
> >
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

-- 
Asaf Maruf Ali
PING Systems
Network Security-Linux-Consulting
605, 6th Floor,
Clifton Centre, Block 5,
Clifton, Karachi-75600
Pakistan
Tel # 5872438, 5868275, 5833971-2
Fax # 5868927