send mysql log to remote central server

niteen · 11-20-2015, 12:32 PM

Hi,
i have configured rsyslog as follows

Quote:

server :

/etc/rsyslog.conf
=================
$ModLoad imudp
$UDPServerRun 514

$ModLoad imtcp
$InputTCPServerRun 514

Quote:

client :

/etc/rsyslog.conf
=================
#UDP
*.* @server's_ip:514
#TCP
*.* @@server's:514

/etc/my.cnf
===========
[mysqld_safe]
syslog

in server "tail -f /var/log/messages"
i am not getting any client's log.

Please share me correct configuration, if i am wrong anywhere.

Thanks in advance

custangro · 11-20-2015, 12:38 PM

Usually I would also put this on the client side

Code:

$WorkDirectory /var/lib/rsyslog # where to place spool files
$ActionQueueFileName fwdRule1 # unique name prefix for spool files
$ActionQueueMaxDiskSpace 1g   # 1gb space limit (use as much as possible)
$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
$ActionQueueType LinkedList   # run asynchronously
$ActionResumeRetryCount -1    # infinite retries if host is down

On my set up I only have the following entry once

Code:

*.* @@loghost.example.net:514

Also did you open up ports 514 tcp/udp?

TB0ne · 11-20-2015, 12:43 PM

Quote:

Originally Posted by niteen

Hi,
i have configured rsyslog as follows

in server "tail -f /var/log/messages" i am not getting any client's log. Please share me correct configuration, if i am wrong anywhere.

..and the first two hits in Google for "send mysql log to remote syslog", are:
http://dba.stackexchange.com/questio...logs-to-syslog
http://help.papertrailapp.com/kb/con...ql-query-logs/

...which contain at least four different methods of doing this. Please try to do research on your own.

niteen · 11-21-2015, 03:58 AM

Hi custangro,

I edited my configuration as per your suggestion. have a look!!

server
======

Quote:

/etc/rsyslog.conf

$ModLoad imudp
$UDPServerRun 514

$ModLoad imtcp
$InputTCPServerRun 514

##netstat -pant | grep 514 result is

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:514 0.0.0.0:* LISTEN -
tcp 0 0 :::514 :::* LISTEN -

Also
Client
======

Quote:

/etc/rsyslog.conf

$WorkDirectory /var/lib/rsyslog # where to place spool files
$ActionQueueFileName fwdRule1 # unique name prefix for spool files
$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
$ActionQueueType LinkedList # run asynchronously
$ActionResumeRetryCount -1 # infinite retries if host is down
# Remote rsyslog server's IP address.
#UDP
#*.* @server-IP
#TCP
*.* @server-IP:514

unable to receive client's log.

niteen · 11-23-2015, 05:37 AM

while googling i found this link :
http://linuxsysconfig.com/2013/04/ho...rhel6-centos6/

But no success yet!!! :-(

TB0ne · 11-24-2015, 09:48 AM

Quote:

Originally Posted by niteen

while googling i found this link :
http://linuxsysconfig.com/2013/04/ho...rhel6-centos6/

But no success yet!!! :-(

Again, just saying "no success yet", doesn't give us much to go on.

And since you ignored my previous post with TWO LINKS that gave you four different ways to do this, there's not much point in restating that. Good luck.