安装syslogs

1、下载及解压及安装syslogs

[root@localhost home]# wget http://cactiusers.org/downloads/syslog.tar.gz

[root@localhost home]# tar xvf syslog-0.5.2.tar.gz

[root@localhost home]# mv syslog/ /var/www/html/plugins/

[root@localhost home]# cd /var/www/html/plugins/syslog/

[root@localhost syslog]# ls

compatibility.php  html       LICENSE    syslog_alert.php    syslog_process.php  syslog.sql  config.php         p_w_picpaths     README     syslog_counter.php  syslog_remove.php   template

functions.php      index.php  setup.php  syslog.php          syslog_reports.php

[root@localhost syslog]#

 

创建syslog数据库

mysql> create database syslog;

mysql> grant all privileges on syslog.* to sysloguser@localhost identified by 'cacti' with grant option;

mysql>flush privileges;

 

导入数据库文件

[root@localhost syslog]# mysql -h localhost -u sysloguser -p syslog < /var/www/html/plugins/syslog/syslog.sql

Enter password:

[root@localhost syslog]#

 

修改数据库连接文件，修改前先备份

[root@localhost syslog]# cp config.php config.php.old

[root@localhost syslog]# vi config.php

$syslogdb_type     = 'mysql';

$syslogdb_default  = 'syslog';

$syslogdb_hostname = 'localhost';

$syslogdb_username = 'sysloguser';

$syslogdb_password = ' cacti ';

 

2、安装syslog-ng传送日志到数据库中

yum安装syslog-ng
[root@localhost syslog]# yum install syslog-ng

停用原syslog，启用syslog-ng
[root@localhost syslog]# /etc/init.d/rsyslog stop
Shutting down system logger: [  OK  ]

[root@localhost syslog]# /etc/init.d/syslog-ng restart
Stopping syslog-ng: [  OK  ]
Starting syslog-ng: [  OK  ]
[root@localhost syslog]#

将syslog-ng加入自启动项并且停用rsyslog
[root@localhost syslog]# chkconfig rsyslog off
[root@localhost syslog]# chkconfig --level 35 syslog-ng on

配置syslog-ng配置文件，在syslog-ng.conf末端加入如下代码
source net {

        udp ();

};

destination d_mysql {

        pipe("/tmp/mysql.pipe"
        template("INSERT INTO syslog_incoming(host,facility,priority,date,time,message) VALUES ('$HOST','$FACILITY', '$PRIORITY', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$MSG' );\n")
template-escape(yes)
);
};
log { source(net); destination(d_mysql);};
log { source(s_sys); destination(d_mysql);};

重启相关服务
[root@localhost tmp]# /etc/init.d/syslog-ng restart
Stopping syslog-ng: [  OK  ]
Starting syslog-ng: [  OK  ]
[root@localhost tmp]# /etc/init.d/mysqld restart
Stopping mysqld:  [  OK  ]
Starting mysqld:  [  OK  ]
[root@localhost tmp]#

建立shell脚本
#!/bin/bash
if [ ! -e /tmp/mysql.pipe ]
then
mkfifo /tmp/mysql.pipe
fi
while [ -e /tmp/mysql.pipe ]
do mysql -u sysloguser --password= cacti syslog < /tmp/mysql.pipe >/dev/null 2>&1
done

让脚本启动自动执行
赋予cacituser控制权
[root@localhost syslog]# chown -R cactiuser syslogstart.sh
赋予运行权限
[cactiuser@localhost syslog]$ chmod 755 syslogstart.sh
赋予syslog_process.php以运行权限
[cactiuser@localhost syslog]$ chmod 775 syslog_process.php
赋予mysql.pipe以运行权限
[root@localhost tmp]# chown -R cactiuser mysql.pipe
[cactiuser@localhost tmp]$ chmod 777 mysql.pipe
以cactiuser用户添加任务
[cactiuser@localhost syslog] #crontab –e
@reboot /var/www/html/plugins/syslog/syslog.sh
*/1 * * * * php /var/www/html/plugins/syslog/syslog_process.php

重启crond服务，刷新几次网页数据就出来