MonitorWare Knowledge Base

Hey,

New question.

Priority numbers. How do they correlate to the INFO DEBUG NOTICE WARNING ERR CRIT ALERT severity statuses? I'm writing my own web based app for viewing data from the database and I wasn't sure how the numbers coorespond.

Let me know. Thansk!

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Hello,

please see the lists below. They are from RFC 3164.

Code: Select all

      Numerical             Facility
          Code

           0             kernel messages
           1             user-level messages
           2             mail system
           3             system daemons
           4             security/authorization messages (note 1)

           5             messages generated internally by syslogd
           6             line printer subsystem
           7             network news subsystem
           8             UUCP subsystem
           9             clock daemon (note 2)
          10             security/authorization messages (note 1)
          11             FTP daemon
          12             NTP subsystem
          13             log audit (note 1)
          14             log alert (note 1)
          15             clock daemon (note 2)
          16             local use 0  (local0)
          17             local use 1  (local1)
          18             local use 2  (local2)
          19             local use 3  (local3)
          20             local use 4  (local4)
          21             local use 5  (local5)
          22             local use 6  (local6)
          23             local use 7  (local7)

           Table 1.  syslog Message Facilities

        Note 1 - Various operating systems have been found to utilize
           Facilities 4, 10, 13 and 14 for security/authorization,
           audit, and alert messages which seem to be similar.
        Note 2 - Various operating systems have been found to utilize
           both Facilities 9 and 15 for clock (cron/at) messages.

   Each message Priority also has a decimal Severity level indicator.
   These are described in the following table along with their numerical
   values.

        Numerical         Severity
          Code

           0       Emergency: system is unusable
           1       Alert: action must be taken immediately
           2       Critical: critical conditions
           3       Error: error conditions
           4       Warning: warning conditions
           5       Notice: normal but significant condition
           6       Informational: informational messages
           7       Debug: debug-level messages

           Table 2. syslog Message Severities


Hi Brad,

We have a syslog based web interface called phpLogCon
http://www.phplogcon.com/

May I ask you if you are missing any functionality because of the reason that you develop your own application? Perhaps you want to use phpLogCon as a starting point for further development?

Best regards,
Michael

I tried it once before, and the install errored out on me. I got frustrated and bailed on it.

I just tried it again and it was able to go in, but after looking at it, I find it a little complicated for managers. It's a good tool for network admins, but I have managers that want a simplified dumbed down version. I find this alot with all web based apps so I just go in, take the database, and make my own. I only show managers what they want to see, but at the same time, I get brownie points and it keeps me busy and justifies my salary.

But, yours has all but one feature that mine has. I have what I call "hostmasking". Basically, instead of listing ips and fqdn's for servers, I added a feature where I can tell the app that 127.0.0.1 and where ever that is called, to call it something else. It's more of a logical scheme so that admins and managers who don't know what the servers ips are, can easily see oh... that's the "firewall", instead of seeing 240.15.45.1. They wouldn't know what 240.15.45.1 is... but they understand "firewall".

Your app looks a lot better than I remember it, and I have it on my list if any admins would rather use it. But so far, I just need basic info. Maybe some reporting tools. Here's a couple screenshots if your interested. I'll repost as soon as they are online.

The forum won't let me post links to the actual screenshots... maybe it'll let me do a url...

http://www.bizzarscripts.net/watchtower/screenshots.php

Brad,

Thanks for your reply and the detailed information

Best regards,
Michael