[syslog-ng] Microsoft SQL connect issue

[Shawn Cannon]

OK this is some good info.  It looks like even though I specify the database
name, it is someone how using it and tries to create or check for the tables
on the master database.  Any ideas?  Here is the info from the capture.  Why
is is running a SELECT looking for syslogng instead of the database name?

*....(....SELECT * FROM syslogng WHERE 0=1...K.<...7.........Invalid object
name 'syslogng'..RAWSQL\MARTY....................CREATE TABLE syslogng
(datetime varchar(16), host varchar(32), program varchar(32), pid
varchar(8), message varchar(4096))...`.<...L.......4.CREATE TABLE permission
denied in database 'master'..RAWSQL\MARTY............
*
Here is my destination section from my syslogng config:

destination d_mssql {
sql(type(mssql) host("rawsql") port("1785")
username("*******") password("*******") database("Database")
table("syslogng")columns("datetime varchar(16)", "host varchar(32)",
"program varchar(32)", "pid varchar(8)", "message varchar(4096)")
values("$R_DATE", "$HOST", "$PROGRAM", "$PID", "$MSGONLY")
indexes("datetime", "host", "program", "pid"));
};


Shawn Cannon

IT Professional

http://www.shawncannon.com


Contact Me <http://www.linkedin.com/pub/shawn-cannon/5/84/81a>
LinkedIn<http://www.linkedin.com/pub/shawn-cannon/5/84/81a>
<http://www.facebook.com/rolltidega72>
Facebook<http://www.facebook.com/rolltidega72>
<http://twitter.com/rolltidega> Twitter <http://twitter.com/rolltidega>
My blog: My thoughts on VMworld… a week later…<http://www.shawncannon.com/?p=19>



On Mon, Dec 13, 2010 at 1:45 PM, Shawn Cannon <shawn at shawncannon.com> wrote:

> Would it help if I posted the syntax of my config file?
>
>
> Shawn Cannon
>
> IT Professional
>
> http://www.shawncannon.com
>
>
> Contact Me <http://www.linkedin.com/pub/shawn-cannon/5/84/81a> LinkedIn<http://www.linkedin.com/pub/shawn-cannon/5/84/81a>
> <http://www.facebook.com/rolltidega72> Facebook<http://www.facebook.com/rolltidega72>
> <http://twitter.com/rolltidega> Twitter <http://twitter.com/rolltidega>
> My blog: My thoughts on VMworld… a week later…<http://www.shawncannon.com/?p=19>
>
>
>
> On Mon, Dec 13, 2010 at 1:17 PM, Matthew Hall <mhall at mhcomputing.net>wrote:
>
>> On Mon, Dec 13, 2010 at 12:19:03PM -0500, Shawn Cannon wrote:
>> > I meant I ran tsql.  :-)
>> >
>> > Shawn Cannon
>> >
>> > IT Professional
>> >
>> > > OK I installed it ans ran TDS using sql.hidden.local and the port
>> number
>> > > and I was able to create the table.  I changed my syslogng config file
>> to
>> > > this same setting, yet it still gives me an error.  I left the table
>> in the
>> > > database that was created but even that did not help.  Any ideas?
>>
>> There have been some bugs in the past where syslog-ng was not always
>> connecting to the database correctly on the proper ports, etc. However
>> in your case this could only apply if something was also listening on
>> the default port I would assume, since it seemed like it had connected.
>> Although as one of the other posters had pointed out there could be an
>> inaccurate error message as well. Perhaps you could verify it's
>> connecting properly to the DB using Wireshark?
>>
>> Was the tsql / sqsh / etc. based testing performed using the same
>> machine as the syslog-ng setup is running?
>>
>> Matthew.
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.campin.net/syslog-ng/faq.html
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20101213/4fd44cba/attachment.htm