On Mon, Apr 05, 2004 at 11:36:04AM -0700, McCarthy, Joshua wrote: > Hello, I am trying to install jffnms onto a gentoo based linux system and I > am having a lot of problems with msyslog. I noticed on the jffnms site > under features that syslog-ng is listed with msyslog. Is it possible to > substitute syslog-ng for msyslog? And if so how would I go about doing it? > I apologize if this topic has been talked about before, but I just joined > the mailing list. TIA
As Javier said, use his method in the example rather than the way the document uses as that appears to be a bit more stable. One thing you or anyone contemplating pumping syslog messages into JFFNMS is watch the number of events and raw syslog events very closely. We have JFFNMS setup like that and all our Unix and Cisco gear logging back to it. You will find that JFFNMS collects it all in the database which can slow it down. Every single syslog message that you collect (depending on the syslog-ng filters) that JFFNMS doesn't know about gets an Unknown event. The symptom of this slowing down is to see the alarmed interface/events screen. If the top alarms interface comes up quickly but the bottom events frame takes a long time then look at the size of the events table in the datbase. It will be especially noticeable if the database is on another server. We have seen response times of < 0.5 seconds for the top Vs > 5 seconds for the bottom. I ran the SQL query "DELETE FROM events WHERE type=1" this means delete events that are Unknown and the performance on the bottom frame match the top one. Another thing is to be very careful about your syslog-ng setup and only send syslog events you *really* want sent to it. For example, logging AUTH facility may seem like a good idea until you realise that every time cron runs across any of your Unix servers you can get 3 or 4 syslog lines across all your Unix servers. - Craig -- Craig Small GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5 Eye-Net Consulting http://www.enc.com.au/ MIEE Debian developer csmall at : enc.com.au ieee.org debian.org ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
