[syslog-ng] problem in writing to database 2
gatfi sami
pfegatfi.sami at gmail.com
Sun Apr 5 02:31:08 CEST 2009
i succefully added the folowing script to
/etc/profile
it recreates the pilpline but
when i get access to the virtual machine by ssh it is blocked
like this:
Password:
*Last login: Sun Apr 5 03:08:51 2009 from linux-ux35.lan
Have a lot of fun...
*i have to tape ctrl + c to
have
linux-test1:~ #
i have to tape ctrl +c to get access to it
here is the script
#!/bin/bash
if [ -e /tmp/mysql.pipe ]; then
while [ -e /tmp/mysql.pipe ]
do
mysql -u root --password= syslog< /tmp/mysql.pipe
done
else
mkfifo /tmp/mysql.pipe
fi
i think the problem is from
mysql -u root --password= syslog< /tmp/mysql.pipe
2009/4/4 gatfi sami <pfegatfi.sami at gmail.com>
> hi
>
> i am configuring a centralised syslog server and when i arrived to the
> writing into the database there is some thing wrong
>
> because when i use a file as destination i see incoming logs when i restart
> apache2 or mysql in the client
>
> "tail - f /"
> i use syslog -ng 2.0
>
> here is the client
> *source my_src{
> file("/var/log/apache2/error_log" follow_freq(1) );
>
> file("/var/lib/mysql/mysqld.log" follow_freq(1) );
>
> };
>
>
> destination loghost {
> tcp("192.168.1.69" port(514));
> };
> log {
> source(my_src);
> destination(loghost);
> };*
>
>
>
> here is the server
>
> * source mysrc{ tcp(ip(0.0.0.0) port(514) keep-alive(yes));
> #udp();
> };
>
> destination d_mysql {
> pipe("/tmp/mysql.pipe"
> template("INSERT INTO logs (host, facility, priority, level, tag, date,
> time, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL',
> '$TAG',
> '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n")
> template-escape(yes));
> };
> log { source(mysrc); destination(d_mysql);
> };
> *
>
> note that a databes names syslog is already created and contain a table
> logs;
>
>
>
> if itry the following command : syslog-ng -f /etc/syslog-ng/syslog-ng.conf
>
> Error binding socket; addr='AF_INET(0.0.0.0:514)', error='Address already
> in use (98)'
> Error initializing source driver; source='mysrc'
>
>
> ps i used to use the server as relai and send by udp using the same port
> 514 but now everinthing is
>
> commented like this #
>
> need help
>
i added the following script to the file
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090405/5e56108b/attachment.htm
More information about the syslog-ng
mailing list