MonitorWare Knowledge Base

I am currently using rsyslog with php-syslog-ng as my frontend. Everything works great but rsyslog puts values into mysql for fields "facility" and "priority". php-syslog-ng requires values in there instead of numbers. When numbers are entered it does not show the log entries correctly in the interface. Using the words resolve the issue.

example:

rsyslog puts "facility=0" and "priority=6" into logs
php-syslog-ng needs "facility=kern" and "priority=info" into logs.

How do i get rsyslog to enter the corresponding values instead of the numbers?

Thank you.

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

I remember this, php-syslog-ng works with the nonstandard text variables. I've added extra properties for this some time ago. You need to change the fields used in the template. Do not use "syslogfacility" but "syslogfacility-text" instead. Same with "syslogseverity-text". That should do the trick.

Rainer

Tried changing the template with no success still puts numbers into the files.

This is what i have for my template specification:
$template syslog-ng,"insert into logs(host, facility, priority, tag, datetime, msg)values
('%HOSTNAME%', %syslogfacility-text%, %syslogpriority-text%, '%syslogtag%', '%timereported:::date-mysql%', '%msg%')", SQL

Does that look correct?

Same behavior put updated template:

$template syslog-ng,"insert into logs(host, facility, priority, level, tag, datetime, program, msg)values('%HOSTNAME%',
%syslogfacility-text%, %syslogpriority-text%, %syslogseverity-text%, '%syslogtag%', '%timereported:::date-mysql%',
%programname%, '%msg%')", SQL

Just wanted to report back and let everyone know that if you use the above statment and put single quotes around all the variables that have "-text" specified the template will work without any issues.