Syslog-ng

Instalace:

apt-get install syslog-ng libdbd-mysql

Konfigurační soubor (/etc/syslog-ng/syslog-ng.conf) obsahuje zakomentované takřka všechny příklady použití.

Logování do databáze

Vytvořte databázi a uživatele:

CREATE DATABASE `syslog` DEFAULT CHARACTER SET utf8 COLLATE utf8_czech_ci;

CREATE USER 'syslogwriter'@'localhost' IDENTIFIED BY 'syslogwriter-password';

GRANT USAGE ON * . * TO 'syslogwriter'@'localhost' IDENTIFIED BY '***' WITH MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0 MAX_USER_CONNECTIONS 0 ; 

GRANT ALL PRIVILEGES ON `syslog` . * TO 'syslogwriter'@'localhost';

Do /etc/syslog-ng/syslog-ng.conf přidejte:

1. Zdroj bude sit

source s_network {

       udp(ip("0.0.0.0") port(514));

};

1. Cil bude MySQL databaze - staci vytvorit databazi, pokud ma uzivatel prava, tabulka se vytvori sama

destination d_mysql {

       sql(type(mysql)
       host("localhost") username("syslogwriter") password("syslogwriter-password")
       database("syslog")
       table("logs")
       columns("host", "facility", "priority", "level", "tag", "datetime", "program", "msg")
       values("$HOST_FROM", "$FACILITY", "$PRIORITY", "$LEVEL", "$TAG", "$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC", "$PROGRAM", "$MSG")
       indexes("host", "facility", "priority", "datetime", "program"));

};

log { source(s_network); destination(d_mysql); };