reading multiple source files

General discussions here

Google Ads


reading multiple source files

Postby murphybr » Wed Jul 07, 2010 12:18 pm

I have installed LogAnalyzer but noticed it is (by my default) only reading the /var/log/messages file. I would like it to read the entire syslog message array (messages, maillog, secure, cron, spooler, boot.log, etc) is this possible, if so what do i need to do to set this up?
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: reading multiple source files

Postby alorbach » Wed Jul 07, 2010 12:24 pm

Hi,

sure you can create as many logstream sources as you want.
If you have the UserDB System installed, you can add new logstream sources by using the Admin Center.

best regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: reading multiple source files

Postby murphybr » Wed Jul 07, 2010 3:40 pm

I don't believe i have the UserDB up. how would i configure that?
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Re: reading multiple source files

Postby murphybr » Wed Jul 07, 2010 6:53 pm

i have installed mysql + mysqk-server+ mysql-devel and started the service(chkconfig is on)
however when re-installing Log Analyzer, it appears to have an error with connecting to my new MySQL db. the error log shows up as:
[Wed Jul 07 16:06:21 2010] [error] [client 168.207.5.14] PHP Fatal error: Call to undefined function mysql_connect() in /var/www/html/loganalyzer/install.php on line 312, referer: http://172.29.xx.xx/loganalyzer/install.php?step=3

is there something else i need to have installed for this to work.
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Re: reading multiple source files

Postby alorbach » Thu Jul 08, 2010 6:08 am

You can extend your current installation with the UserDB, see this article for more:
http://wiki.rsyslog.com/index.php/How_t ... llation%3F

However mysql extension for php does not seem to be installed on your server. Install php5-mysql package.

best regards,
Andre Lorbach
alorbach
Site Admin
 
Posts: 1627
Joined: Thu Feb 13, 2003 11:55 am

Re: reading multiple source files

Postby murphybr » Thu Jul 08, 2010 11:34 am

I have admin center up and running now, I get that you can add as many logstreams as wanted, but is there a way to get them all to show up in one search rather than having the users choose via a dropdown of the sources?
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Re: reading multiple source files

Postby murphybr » Mon Jul 12, 2010 2:17 pm

Anyone have any ideas for this. instead of multiple source files, I want 1 source file that will read ALL logs sent by Syslog. any idea how i can do this with my source reader configuration???
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Re: reading multiple source files

Postby Burn » Tue Jul 13, 2010 6:13 am

murphybr wrote:Anyone have any ideas for this. instead of multiple source files, I want 1 source file that will read ALL logs sent by Syslog. any idea how i can do this with my source reader configuration???

log everything into 1 file?
Burn
Frequent Poster
 
Posts: 60
Joined: Wed Jan 20, 2010 7:15 am

Re: reading multiple source files

Postby murphybr » Tue Jul 13, 2010 5:06 pm

well say this is used for anywhere between 50-500 servers all the syslog files coming to the server housing this frontend application. those files are going to be large enough as it is... and since syslog encompasses /var/log/messages, /var/log/maillog, /dev/console, /var/log/secure, /var/log/cron, /var/log/spooler wouldnt it just be more feasible to have this read all at once rather than read a single file or take files that are already large enough as it will be and create a new file with all this info in it?
murphybr
Avarage
 
Posts: 11
Joined: Tue Jun 01, 2010 7:25 pm

Re: reading multiple source files

Postby Burn » Wed Jul 14, 2010 3:06 am

murphybr wrote:well say this is used for anywhere between 50-500 servers all the syslog files coming to the server housing this frontend application. those files are going to be large enough as it is... and since syslog encompasses /var/log/messages, /var/log/maillog, /dev/console, /var/log/secure, /var/log/cron, /var/log/spooler wouldnt it just be more feasible to have this read all at once rather than read a single file or take files that are already large enough as it will be and create a new file with all this info in it?

I don't understand what you want.
Burn
Frequent Poster
 
Posts: 60
Joined: Wed Jan 20, 2010 7:15 am

Re: reading multiple source files

Postby jaimet561 » Tue Aug 09, 2016 8:44 pm

Hello guys,

Is there a way that Adiscon can read any log file? I do not mean the log files created by rsyslog. I mean any log file, for example, log files from PostgresQL.
Can anyone give me some advise?

Thank you
jaimet561
Avarage
 
Posts: 20
Joined: Fri Jun 10, 2016 4:10 pm

Google Ads



Return to General

Who is online

Users browsing this forum: No registered users and 0 guests

cron