[syslog-ng] Centos 6 Syslog-ng

Pigri pappdav at gmail.com
Mon Jan 9 10:25:21 CET 2012


Hello!

I have problem for Centos 6.Rebuild syslog-ng package for epel repo,
because not have SQL support.
But i have this problem:

Error:

The number of columns and values do not match; len_columns='10',
len_values='11'
Error initializing dest driver; dest='d_apache_mysql', id='d_apache_mysql#0'
Error initializing message pipeline;

Config:

parser p_apache {
csv-parser(
columns(
"APACHE.CLIENT_IP",
"APACHE.IDENT_NAME",
"APACHE.USER_NAME",
"APACHE.TIMESTAMP",
"APACHE.REQUEST_URL",
"APACHE.REQUEST_STATUS",
"APACHE.CONTENT_LENGTH",
"APACHE.REFERER",
"APACHE.USER_AGENT",
"APACHE.VIRTUAL_HOST",
"APACHE.SERVER_NAME")
flags(escape-none,escape-backslash,escape-double-char,escape-double-char,strip-whitespace)
delimiters(" ")
quote-pairs('""[]')
);
};

destination d_apache_mysql {
sql(type(mysql)
host("localhost") username("root") password("xxxxx")
database("data")
table("accesslog")
columns("1", "2", "3", "4", "5", "6", "7", "8","9","10")
values("$APACHE.CLIENT_IP","$APACHE.IDENT_NAME","$APACHE.USER_NAME","$APACHE.TIMESTAMP","$APACHE.REQUEST_URL","$APACHE.REQUEST_STATUS","$APACHE.CONTENT_LENGTH","$APACHE.REFERER","$APACHE.USER_AGENT","$APACHE.VIRTUAL_HOST","$APACHE.SERVER_NAME")
indexes("1", "2", "3", "4", "5", "6", "7", "8","9","10"));
};

destination d_apache_me { file("/var/log/test.me.log"); };
filter f_apache_edata { facility(local6) and program(test.me); };
log { source(s_sys); parser(p_apache); filter(f_apache_edata);
destination(d_apache_mysql); };


Version:

LIBDBI:
Version     : 0.8.3

Syslog-ng:

syslog-ng 3.2.5
Installer-Version: 3.2.5
Revision: ssh+git://bazsi@git.balabit
//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.2#master#9d4bea28198bd731df1a61e980a2af5b88d81116
Compile-Date: Jan  8 2012 22:19:13
Enable-Threads: on
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-Sun-STREAMS: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: on
Enable-SSL: on
Enable-SQL: on
Enable-Linux-Caps: off
Enable-Pcre: on
Enable-Pacct: off

Strace:

http://dl.dropbox.com/u/4683046/debug

Thank you for all.

Best regards,

pigri
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20120109/e1f4fa63/attachment.htm 


More information about the syslog-ng mailing list