mysql用 fifo 记录日志_syslog_ng的安装与配置及日志记录至mysql

最新推荐文章于 2021-03-10 01:51:32 发布

希惜溪

最新推荐文章于 2021-03-10 01:51:32 发布

阅读量131

点赞数

文章标签： mysql用 fifo 记录日志

本文链接：https://blog.csdn.net/weixin_42364855/article/details/113216274

版权

本文介绍了在CentOS 5.4环境下，如何安装syslog-ng、eventlog和libol，以及配置syslog-ng将日志记录至MySQL的过程。涉及步骤包括安装相关软件、配置syslog-ng.conf文件、设置数据库表以及启动和测试syslog-ng服务。

摘要由CSDN通过智能技术生成

实现环境：

centos5.4+syslog-ng_3.3.1.tar+eventlog_0.2.12.tar+libol-0.3.9.tar

安装eventlog:

./configure –prefix=/usr/local/eventlog && make && make install

安装 libol: http://www.balabit.com/downloads/files/libol/0.3

./configure –prefix=/usr/local/libol &&make && make install

安装 syslog-ng:

#export PKG_CONFIG_PATH=/usr/local/eventlog/lib/pkgconfig

./configure –prefix=/usr/local/syslog-ng --with-libol=/usr/local/libol

#make && make install

configure: error: Cannot find eventlog version >= 0.2: is pkg-config in path? (若出现这个错误，基本上是由于前面的

PKG_CONFIG_PATH变量没指定好)

#mkdir /usr/local/syslog-ng/etc

#mkdir /usr/local/syslog-ng/var

#cp contrib/syslog-ng.conf.RedHat /usr/local/syslog-ng/etc/syslog-ng.conf

#cp contrib/init.d.RedHat /etc/init.d/syslog-ng

#cd /usr/local/syslog-ng/etc/

#cat syslog-ng.conf

@version:3.0

options {

long_hostnames(off);

log_msg_size(8192);

flush_lines(1);

log_fifo_size(20480);

time_reopen(10);

use_dns(yes);

dns_cache(yes);

use_fqdn(yes);

keep_hostname(yes);

chain_hostnames(no);

perm(0644);

stats_freq(43200);

};

source s_internal { internal(); };

destination d_syslognglog { file("/var/log/syslog-ng.log"); };

log { source(s_internal); destination(d_syslognglog); };

source s_local {

unix-dgram("/dev/log");

file("/proc/kmsg" program_override("kernel:"));

};

filter f_messages { level(info..emerg); }; //定义7种日志类型

filter f_secure { facility(authpriv); };

filter f_mail { facility(mail); };

filter f_cron { facility(cron); };

filter f_emerg { level(emerg); };

filter f_spooler { level(crit..emerg) and facility(uucp, news); };

filter f_local7 { facility(local7); };

destination d_messages { file("/var/log/messages"); }; //定义7种类型日志在客户端的位置

destination d_secure { file("/var/log/secure"); };

destination d_maillog { file("/var/log/maillog"); };

destination d_cron { file("/var/log/cron"); };

destination d_console { usertty("root"); };

destination d_spooler { file("/var/log/spooler"); };

destination d_bootlog { file("/var/log/dmesg"); };

log { source(s_local); filter(f_emerg); destination(d_console); };

log { source(s_local); filter(f_secure); destination(d_secure); flags(final); };

log { source(s_local); filter(f_mail); destination(d_maillog); flags(final); };

log { source(s_local); filter(f_cron); destination(d_cron); flags(final); };

log { source(s_local); filter(f_spooler); destination(d_spooler); };

log { source(s_local); filter(f_local7); destination(d_bootlog); };

log { source(s_local); filter(f_messages); destination(d_messages); };

# Remote logging //定义监听的端口

source s_remote {

tcp(ip(0.0.0.0) port(514));

udp(ip(0.0.0.0) port(514));

};

//定义客户端日志在服务器上保存的格式，位置和权限等

destination r_console {file("/var/log/syslog-ng/$YEAR$MONTH$DAY/$HOST/console" owner("root") group("root") perm(0640)