MonitorWare Knowledge Base

Hello Everyone,

I am very excited to to start to use this software however I am having a problem getting it to fully connect to MySQL. After completing all the install steps outlined on the website, I log into phpLogCon and I get the error message in the picture that is attached. I started out with version 2.6.3 and then went through the forums and google and noticed this issue was present in 2.6.2 so I thought I would try the beta of 2.7.1 but I am still seeing the same problem.

Here is a list of the software and OS I am using:
Ubuntu Server 9.0.4
mySQL 5.0.75
phpLogCon 2.6.3 and 2.7.1

If there is anything else that is needed please let me know. I am sure that I am missing something.

Thank you in advance,

-Dean

Just noticed the image was really small, so here is the text of the error:

No Syslog record found - Error Details:

Could not find the configured table, maybe misspelled or the tablenames are case sensitive


My apologies.

• Custom phpLogCon configuration?
• Maintenance Contract?
• Installation support?

ok, I have done some more digging and this is what I have turned up.

During the web setup in Step 3 I have it create the database 'phplogcon' which I created manually since it could not find it.
This is the result of Step 5:
# Successfully executed statements: 22
# Failed statements: 0

In Step 7 it asks about a 'Database Table Name' and it has 'systemevents' in there by default, even though there is no table in my database with that name. All my tables start with 'logcon_' which was specified in Step 3. What are the requirements for the 'Database tables' it is looking for? Or is that coming from the database that would be needed for my syslog server?

Thanks!

-Dean

phpLogCon, as far as I know, assumes that the database contains tables properly created for the syslogd in question. With rsyslog, there are database creation scripts in the contrib directories.

Rainer

I have this all figured out now. Thank you. Unfortunately both of the syslog servers we are using are just going to a text file, so I am able to connect to those and view them on the web now.

One question though, I noticed that my Cisco PIX and VPN concentrator logs look odd. It's almost as if the information is offset. Some information in a record is being pulled into the correct field, while other information in the same record end up in the wrong field, or it gets split into different fields. Is this normal? I've looked at my Cisco config's and I don't see anywhere to change the format of how the data is being sent to the syslog server.

-Dean