MonitorWare Knowledge Base

Hi all, I'm trying to use phplogcon 2.8.0. with a syslog-ng server (Debian Lenny). It collects logs from a windows 2003 server with Snare Agent; the data logging on a file works fine and I can see the events in the web browser, so I've done some attempts to use a mysql database, but with no luck.
First of all I've created the database in this way:

CREATE DATABASE syslog;
USE syslog;
CREATE TABLE logs (
host varchar(32) default NULL,
facility varchar(10) default NULL,
priority varchar(10) default NULL,
level varchar(10) default NULL,
tag varchar(10) default NULL,
date date default NULL,
time time default NULL,
program varchar(15) default NULL,
msg text, seq int(10) unsigned NOT NULL auto_increment,
PRIMARY KEY (seq),
KEY host (host),
KEY seq (seq),
KEY program (program),
KEY time (time),
KEY date (date),
KEY priority (priority),
KEY facility (facility)
) TYPE=MyISAM;

and in fact the database is full of events, as you can see in this image:
http://img64.imageshack.us/img64/8682/dataj.png
but in Show Events Window always appears the message "No Syslog Records found". In Sources Options I've changed from SyslogNG to Monitorware, but with no result. In Show Database statistics the Table filesize amounts (at this moment) to about 160kB and Rowcount is 288, so I guess the database is working correctly; it seems the problem is similar to this: problem-with-connection-mysql-data-base-t9881.html but I'm a newbie and I need a little help step by step Any help is appreciated and thanks to all in advance.

bluto

• Custom phpLogCon configuration?
• Maintenance Contract?
• Installation support?

Hi,

this database layout is not supported, or predefined in phpLogCon.
You will either have to use the database layout supported by rsyslog, or manually create a custom database mapping within phpLogCon.
The UserDB System needs to be installed to do so.

best regards,
Andre Lorbach

Thanks for reply, for best compatibility I'm planning to switch to use rsyslog instead of syslog-ng
regards
bluto