[syslog-ng] Syslog file to Mysql

[Dukes Clayton]

Yep, that would certainly work for ya :-)
 

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Mario Gzuk
Sent: Tuesday, April 25, 2006 12:20 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Syslog file to Mysql

Hi,
one line should do the work for you:

zcat mygnuziplogfile.gz | awk '{print "INSERT INTO tablename VALUES("$1
$2 $3","$4","$5");"}' > sqlcommands.sql

You have to rewrite the awk stuff because I dont know how your table
layout locks like and I also dont know how your logfile locks like.

Sorry for the english.... it is a work in progress!

Am Dienstag, den 25.04.2006, 11:48 -0500 schrieb Nick:
> Michael,
> 
> Thanks for the reply,
> 
> I did not describe my situation very well, but your solution will help

> with other needs.  I have multiple boxes where I can not directly 
> syslog to the central server.  What I do is, scp the files back to the

> central log server.  From here I would like to uncompress them and 
> then import the files into the database.
> 
> Hope that is a bit clearer.
> 
> Nick
> 
> On 4/25/06, Michael Redinger <Michael.Redinger at uibk.ac.at> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi,
> >
> > regarding adding information to the local log, you could add this to

> > the log destination definition, eg.:
> >
> > destination d_local {
> >         file("/var/log/mylogfile.log" template("$DATE $HOST 
> > [$FACILITY.$PRIORITY] $MSG\n")); };
> >
> > The result looks something like this:
> >
> > Apr 25 16:59:09 myhost [local1.info] syslog message follows
> >
> > Greetings,
> > Michael
> >
> > Nick Carstensen wrote:
> > > Hello All,
> > >
> > > Have a question I hope someone can help with.
> > >
> > > Currently I have Syslog-ng running logging to a mysql db along 
> > > with keeping files.  This is working well.  I have a situation 
> > > where I can not log to the box directly.  I need to "pull" the 
> > > logs to the central log server and import them into the db.  As 
> > > syslogd and syslog-ng do not log all the needed fields by default 
> > > like facility:level and year, when they are writing them local I
need a way to add that to the file.
> > >
> > > The second problems is how to import them to the db.  Is there any

> > > tool that will do this for me automatically?
> > >
> > > Thanks for the assistance.
> > > _______________________________________________
> > > syslog-ng maillist  -  syslog-ng at lists.balabit.hu 
> > > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > > Frequently asked questions at 
> > > http://www.campin.net/syslog-ng/faq.html
> > >
> > >
> >
> >
> > - --
> > Michael Redinger
> > Zentraler Informatikdienst (Central IT Services) Universitaet 
> > Innsbruck
> > Technikerstrasse 13                    Tel.: ++43 512 507 2335
> > 6020 Innsbruck                         Fax.: ++43 512 507 2944
> > Austria                                Mail:
Michael.Redinger at uibk.ac.at
> > BB98 D2FE 0F2C 2658 3780  3CB1 0FD7 A9D9 65C2 C11D 
> > http://homepage.uibk.ac.at/~c102mr/mred-pubkey.asc
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.2.2 (GNU/Linux)
> > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> >
> > iD8DBQFETjoyD9ep2WXCwR0RAoo+AKCKxQrcmNfDhCj5MPa+XzcSZbKKegCgpzti
> > +BssjXgkZbz0OATuDUajyoY=
> > =FrIc
> > -----END PGP SIGNATURE-----
> > _______________________________________________
> > syslog-ng maillist  -  syslog-ng at lists.balabit.hu 
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at 
> > http://www.campin.net/syslog-ng/faq.html
> >
> >
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu 
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 
> 
> 


_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html