only one trigger rule : (I notice this warning) : under trigger rules
administration
Triggers Administration More Less Add
Action ID Description Type
Edit Del View Rules 2 Interface Status Change Match Alarms
Match Events
under : view rules :
Action ID Position Field Operator Value Action Action
Parameters if Match
Edit Del 2 10 If is Not In
Warning: call_user_func_array(): First argumented is expected to be a
valid callback, '' was given in d:\jffnms\lib\gui.controls.inc.php on line
529
Then Send Mail Subject: <interface-client_shortname> <
Comment: Default Trigger
Continue And
Greetz,
Johan
----- Original Message -----
From: "Javier Szyszlican" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, July 07, 2004 5:14 PM
Subject: Re: [jffnms-users] Re: cpu values not discovered on cisco 800
> Hi Johan,
>
> If you want to limit a user by a customer interfaces, you have to create
> a customer, thats right. But you could have used a map, or used the
> Customer access directly (only to the performance graphs).
>
> You don't have to touch 'Different Alarm for UP event' thats an internal
> parameter that will not affect the triggers.
>
> The trigger system should be sending you all the events you filtered
> with the rules.
>
> What trigger rules do you have? are they event or alarm rules?
>
> As for the limits, a (Customer Limited) User should only see its stats
> in the Start Page, and it can only change a few profile options, it can
> see them all, but it can't change them. Profile options are defined in a
> Menu, so you can modify them.
>
> Javier
>
> [EMAIL PROTECTED] wrote:
> > Hi,
> >
> > It seems to work too : i figured out that i have to make for same client
a
> > customer AND a user : so this works too. Next : I notice that I only
get
> > alerts when the interfaces go down : is it possible to receive an alert
too
> > when the interface comes up ? I notice that in the Event Types
> > Administration there is a rule Interface Protocol Big Fault Interface
> > <interface> Protocol <state> <info> (<client> <interface-description>)
> >
> >
> > and that this causes the down messages. I notice that there is a bit
> > further "different alarms for up event" . But when I point there for
example
> > "internal", I dont see anything when interfaces comes up again. What
exactly
> > do I ave to with this "different alarms for up event" ?
> > Other question : Is there a way to limit the users's rights. I see that
they
> > receive the views/start page with all the options : where can I limit
the
> > topics they can see. Also users appear to have rights to edit their own
> > profile, which i dont want : also possibility to avoid this ?
> > ps : sorry for the number of questions, I will try to limit them :))
> >
> > Greetings,
> > Johan
> >
> >
> >
> > ----- Original Message -----
> > From: "Javier Szyszlican" <[EMAIL PROTECTED]>
> > Cc: <[EMAIL PROTECTED]>
> > Sent: Monday, July 05, 2004 3:54 AM
> > Subject: Re: [jffnms-users] Re: cpu values not discovered on cisco 800
> >
> >
> >
> >>Hi Johan,
> >>
> >>You have to use Users for this.
> >>
> >>And you CAN filter a User view by a Customer ID, use the Customer Filter
> >>profile option, and use the Customer ID as a value.
> >>
> >>So that user will only see the customer interfaces and events.
> >>
> >>This also works with maps using the Base Map profile option.
> >>
> >>Javier
> >>
> >>[EMAIL PROTECTED] wrote:
> >>
> >>>Javier,
> >>>
> >>>Thx this works too. Thx a lot. Now another question :)) woops. It is
> >
> > perhaps
> >
> >>>an idea for next version : what I like to have is that customers only
> >
> > can
> >
> >>>see the statistics of their own router, this means the customers
section
> >>>(not users) and if there is a possibility that they can receive a mail
> >
> > when
> >
> >>>some of their interfaces goes down, i.e. a customers triggers
> >
> > administration
> >
> >>>and a profile for the customers. I notice that now there is a users
> >
> > section
> >
> >>>for this. You could see use the customer as user, but with user I see
> >
> > all
> >
> >>>the routers and not the only one of the customer. What I also try to
get
> >>>fixed is some kind of events integrated in the performance trends,
which
> >>>makes the customer can see that his interface goes up and down.
> >>>
> >>>If you can help me, let me know
> >>>
> >>>greetz,
> >>>Johan
> >>>----- Original Message -----
> >>>From: "Javier Szyszlican" <[EMAIL PROTECTED]>
> >>>Cc: <[EMAIL PROTECTED]>
> >>>Sent: Sunday, July 04, 2004 3:15 AM
> >>>Subject: [jffnms-users] Re: cpu values not discovered on cisco 800
> >>>
> >>>
> >>>
> >>>
> >>>>Hi Johan,
> >>>>
> >>>>You should add a new poller with this OIDs in the Pollers screen, then
> >>>>add them to the Cisco Router Poller Group, copy all other values from
> >>>>the normal Cisco CPU Utilization poller.
> >>>>
> >>>>Javier
> >>>>
> >>>>[EMAIL PROTECTED] wrote:
> >>>>
> >>>>
> >>>>>Javier,
> >>>>>
> >>>>>
> >>>>>thx a lot : i get the correct bandwidth settings discovered correctly
> >>>
> >>>now.
> >>>
> >>>
> >>>>>But life goes on and I have some new issues. It concerns the cpu
> >>>
> >>>monitoring
> >>>
> >>>
> >>>>>of certain cisco's. With cisco 1700 series, correct values are being
> >>>
> >>>given.
> >>>
> >>>
> >>>>>Nevertheless with cisco 800 series (dsl routers) memory is being
given
> >>>>>correctly, but with cpu no values are returned. Normally they should
> >
> > use
> >
> >>>OID
> >>>
> >>>
> >>>>>1.3.6.1.4.1.9.2.1.57.0 and OID 1.3.6.1.4.1.9.2.1.58.0.
> >>>>>Do I have to change something in some of the scripts (which script?)
or
> >>>
> >>>is
> >>>
> >>>
> >>>>>there possibility that this works by adding specific mib (in
/usr/mibs/
> >>>
> >>>?)
> >>>
> >>>
> >>>>>Greetings,
> >>>>>Johan
> >>>>>
> >>>>>----- Original Message -----
> >>>>>From: "Javier Szyszlican" <[EMAIL PROTECTED]>
> >>>>>Cc: <[EMAIL PROTECTED]>
> >>>>>Sent: Wednesday, June 30, 2004 10:15 PM
> >>>>>Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
syslog-ng
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>>Claytom
> >>>>>>
> >>>>>>Good, now add this:
> >>>>>>
> >>>>>>destination jffnms_processing {
> >>>>>> program ("mysql -u jffnms -pjffnms jffnms <
/tmp/mysql.pipe"); };
> >>>>>>
> >>>>>>log {
> >>>>>> source (s_jffnms);
> >>>>>> filter (f_jffnms); #if you use it
> >>>>>> destination (d_jffnms);
> >>>>>>};
> >>>>>>
> >>>>>>And restart syslog-ng.. and show me the ps fax again.
> >>>>>>
> >>>>>>Javier
> >>>>>>
> >>>>>>Clayton Dukes wrote:
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>Yes,
> >>>>>>>Sorry -- let me clarify -- perhaps I have changed it some to fit my
> >>>>>
> >>>>>already
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>running needs (Sorry :-))
> >>>>>>>
> >>>>>>>Thanks for the help!
> >>>>>>>
> >>>>>>>Here's my syslog-ng.conf:
> >>>>>>>
> >>>>>>># $Header:
> >>>>>>>
> >>>>>
> >>>>>
> >
/home/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v
> >
> >>>>>>>1.3 2003/05/12 22:43:48 msterret Exp $
> >>>>>>>#
> >>>>>>># Syslog-ng default configuration file for Gentoo Linux
> >>>>>>># contributed by Michael Sterrett
> >>>>>>>#
> >>>>>>>
> >>>>>>>options { use_fqdn(yes);
> >>>>>>> keep_hostname(yes);
> >>>>>>> use_dns(no);
> >>>>>>> long_hostnames(off);
> >>>>>>> sync(0);
> >>>>>>> log_fifo_size(1000);
> >>>>>>>
> >>>>>>> # The default action of syslog-ng 1.6.0 is to log a STATS
line
> >>>>>>> # to the file every 10 minutes. That's pretty ugly after a
> >>>>>
> >>>>>while.
> >>>>>
> >>>>>
> >>>>>
> >>>>>>> # Change it to every 12 hours so you get a nice daily update
> >
> > of
> >
> >>>>>>> # how many messages syslog-ng missed (0).
> >>>>>>> stats(43200);
> >>>>>>>};
> >>>>>>>
> >>>>>>>############################
> >>>>>>># Set up Sources
> >>>>>>>############################
> >>>>>>>source src { unix-dgram("/dev/log"); internal(); };
> >>>>>>>source net { udp(); };
> >>>>>>>source s_jffnms { unix-dgram("/dev/log"); internal(); udp(); };
> >>>>>>>
> >>>>>>>############################
> >>>>>>># Set up Destinations
> >>>>>>>############################
> >>>>>>>
> >>>>>>># System Logs
> >>>>>>>destination messages { file("/var/log/messages"); };
> >>>>>>>destination authlog { file("/var/log/auth.log"); };
> >>>>>>>destination syslog { file("/var/log/syslog"); };
> >>>>>>>destination kern { file("/var/log/kern.log"); };
> >>>>>>>destination maillog { file("/var/log/maillog"); };
> >>>>>>># Core, Dist., Access and Security Layer Logs
> >>>>>>>destination corelog { file("/var/log/core.log"); };
> >>>>>>>destination accesslog { file("/var/log/access.log"); };
> >>>>>>>destination distributionlog { file("/var/log/distribution.log"); };
> >>>>>>>destination securitylog { file("/var/log/security.log"); };
> >>>>>>>destination ciscolog { file("/var/log/cisco.log"); };
> >>>>>>>
> >>>>>>># Catch-all logs
> >>>>>>>destination debug { file("/var/log/debug"); };
> >>>>>>>
> >>>>>>># MySQL Logs
> >>>>>>>destination d_jffnms {
> >>>>>>>pipe("/tmp/mysql.pipe"
> >>>>>>> template("INSERT INTO syslog (date, date_logged, host, message)
> >>>>>
> >>>>>VALUES
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FU
> >>>>>>>LLHOST', '$MSG');\n") template-escape(yes));
> >>>>>>> };
> >>>>>>>
> >>>>>>>############################
> >>>>>>># Set up Filters
> >>>>>>>############################
> >>>>>>>
> >>>>>>>
> >>>>>>># System Filters
> >>>>>>>filter f_messages { level(info .. warn) and not facility(auth,
mail,
> >>>>>
> >>>>>local6,
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>local5, local4, local3, local0); };
> >>>>>>>filter f_authpriv { facility(auth) ; };
> >>>>>>>filter f_syslog { not facility(auth) and not facility(mail); };
> >>>>>>>filter f_kern { facility(kern); };
> >>>>>>>filter f_mail { facility(mail); };
> >>>>>>>
> >>>>>>># Core, Dist., Access and Security Layer Filters
> >>>>>>>filter f_core { facility(local6); };
> >>>>>>>filter f_distribution { facility(local5); };
> >>>>>>>filter f_access { facility(local4); };
> >>>>>>>filter f_security { facility(local3); };
> >>>>>>>filter f_cisco { facility(local6, local5, local4, local3); };
> >>>>>>>
> >>>>>>># Catch-all Filters
> >>>>>>>filter f_debug { not facility(kern, auth, mail, local6, local5,
> >
> > local4,
> >
> >>>>>>>local3, local0); };
> >>>>>>>filter f_emergency { level(emerg); };
> >>>>>>>
> >>>>>>># MySQL Filters
> >>>>>>># No filter for MySQL
> >>>>>>>#filter f_jffnms { facility(local6); }; # not needed for now
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>############################
> >>>>>>># Set up Logs
> >>>>>>>############################
> >>>>>>>
> >>>>>>>
> >>>>>>># System Logs
> >>>>>>>log { source(src); source(net); filter(f_messages);
> >>>>>
> >>>>>destination(messages);
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>};
> >>>>>>>
> >>>>>>>
> >>>>>>>##END Syslog-ng.conf
> >>>>>>>
> >>>>>>>
> >>>>>>># PS FAX:
> >>>>>>>
> >>>>>>>[EMAIL PROTECTED] root]# ps fax
> >>>>>>>PID TTY STAT TIME COMMAND
> >>>>>>> 1 ? S 0:14 init [3]
> >>>>>>> 2 ? S 0:00 [powerd]
> >>>>>>> 3 ? S 0:00 [keventd]
> >>>>>>> 4 ? SN 0:00 [ksoftirqd_CPU0]
> >>>>>>> 5 ? SN 0:00 [ksoftirqd_CPU1]
> >>>>>>> 6 ? SN 0:00 [ksoftirqd_CPU2]
> >>>>>>> 7 ? SN 0:00 [ksoftirqd_CPU3]
> >>>>>>> 8 ? S 0:07 [kswapd]
> >>>>>>> 9 ? S 0:00 [bdflush]
> >>>>>>> 10 ? S 0:22 [kupdated]
> >>>>>>> 17 ? S 0:00 [scsi_eh_0]
> >>>>>>> 18 ? S 0:00 [scsi_eh_1]
> >>>>>>> 19 ? S 0:00 [khubd]
> >>>>>>>156 ? Ss 0:00 /sbin/devfsd /dev
> >>>>>>>355 ? S 3:07 [kjournald]
> >>>>>>>1173 ? Ss 0:00 /bin/sh /usr/bin/mysqld_safe
> >>>>>>>1244 ? S 0:07 \_ /usr/sbin/mysqld --basedir=/usr
> >>>>>>>--datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysql
> >>>>>>>1300 ? S 0:09 \_ /usr/sbin/mysqld --basedir=/usr
> >>>>>>>--datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/m
> >>>>>>>1301 ? S 4:22 \_
/usr/sbin/mysqld --basedir=/usr
> >>>>>>>--datadir=/var/lib/mysql --user=mysql --pid-file=/var/r
> >>>>>>>20646 ? S 0:53 \_
> >
> > /usr/sbin/mysqld --basedir=/usr
> >
> >>>>>>>--datadir=/var/lib/mysql --user=mysql --pid-file=/var/r
> >>>>>>>1316 ? Ss 0:27 /usr/sbin/apache2 -k start -D SSL -D PHP4
> >>>>>>>20814 ? S 0:00 \_ /usr/bin/perl
> >>>>>
> >>>>>/usr/sbin/apache2splitlogfile
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20815 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>20816 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>20817 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>20818 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>20819 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>20820 ? S 0:00 \_ /usr/sbin/apache2 -k start -D SSL -D
> >>>
> >>>PHP4
> >>>
> >>>
> >>>>>>>1438 ? Ss 0:01 /usr/lib/postfix/master
> >>>>>>>1453 ? S 0:00 \_ qmgr -l -t fifo -u
> >>>>>>>21248 ? S 0:00 \_ pickup -l -t fifo -u
> >>>>>>>1509 tts/0 Ss+ 0:00 /sbin/agetty 9600 ttyS0 vt100
> >>>>>>>9384 ? S 0:00 /usr/sbin/snmpd -P /var/run/snmpd.pid
> >>>>>>>27929 ? Ss 0:00 /usr/sbin/sshd
> >>>>>>>20847 ? Ss 0:00 \_ sshd: [EMAIL PROTECTED]/1
> >>>>>>>20853 pts/1 Ss+ 0:00 | \_ -bash
> >>>>>>>21315 ? Ss 0:00 \_ sshd: [EMAIL PROTECTED]/2
> >>>>>>>21319 pts/2 Ss 0:00 \_ -bash
> >>>>>>>21343 pts/2 R+ 0:00 \_ ps fax
> >>>>>>>20644 ? S 0:00 /usr/bin/rtgpoll -t /etc/rtg/targets.cfg
> >>>>>>>20647 ? S 0:00 \_ /usr/bin/rtgpoll -t
> >
> > /etc/rtg/targets.cfg
> >
> >>>>>>>20648 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20649 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20650 ? S 0:05 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20651 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20652 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20653 ? S 0:05 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20654 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20655 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20656 ? S 0:05 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20657 ? S 0:06 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>20658 ? S 0:00 \_ /usr/bin/rtgpoll -t
> >>>>>
> >>>>>/etc/rtg/targets.cfg
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>21237 ? Ss 0:15 /usr/sbin/syslog-ng
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>-----Original Message-----
> >>>>>>>From: [EMAIL PROTECTED]
> >>>>>>>[mailto:[EMAIL PROTECTED] On Behalf Of
Javier
> >>>>>>>Szyszlican
> >>>>>>>Sent: Wednesday, June 30, 2004 1:00 PM
> >>>>>>>Cc: [EMAIL PROTECTED]
> >>>>>>>Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
> >
> > syslog-ng
> >
> >>>>>>>Clayon,
> >>>>>>>
> >>>>>>>But the configuration you show here its not the same.
> >>>>>>>
> >>>>>>>I mean this one:
> >>>>>>>
> >>>>>>># ---------------------------------------------------------- # #
> >
> > Before
> >
> >>>>>this
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>can work you have to do mkfifo /tmp/mysql.pipe # #
> >>>>>>>---------------------------------------------------------- #
> >>>>>>>
> >>>>>>>
> >>>>>>># ---------------------------------------------------------- #
> >>>>>>># This is an example source, you may want to use your own #
> >>>>>>># ---------------------------------------------------------- #
> >>>>>>>
> >>>>>>>source src {
> >>>>>>> unix-stream("/dev/log");
> >>>>>>> internal();
> >>>>>>> pipe("/proc/kmsg");
> >>>>>>> udp(ip(0.0.0.0) port(514));
> >>>>>>>};
> >>>>>>>
> >>>>>>># ---------------------------------------------------------- # #
> >
> > These
> >
> >>>>>are
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>the lines you have to add to your syslog-ng.conf # #
> >>>>>>>---------------------------------------------------------- #
> >>>>>>>
> >>>>>>>destination jffnms_processing {
> >>>>>>> program ("mysql -u jffnms -pjffnms jffnms <
/tmp/mysql.pipe"); };
> >>>>>>>
> >>>>>>>destination d_jffnms {
> >>>>>>> pipe ("/tmp/mysql.pipe"
> >>>>>>> template("INSERT INTO syslog (date, date_logged, host, message)
> >>>>>
> >>>>>VALUES
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FULLHOST', '$MSG'
> >>>>>>>);\n")
> >>>>>>> template-escape(yes));
> >>>>>>>};
> >>>>>>>
> >>>>>>>
> >>>>>>># This is optional
> >>>>>>>
> >>>>>>>filter f_jffnms {
> >>>>>>> facility(local6);
> >>>>>>>};
> >>>>>>>
> >>>>>>>log {
> >>>>>>> source (src);
> >>>>>>> filter (f_jffnms);
> >>>>>>> destination (d_jffnms);
> >>>>>>>};
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>Also, can you show me a ps fax of your box after this is running ?
> >>>>>>>
> >>>>>>>Javier
> >>>>>>>
> >>>>>>>Clayton Dukes wrote:
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>>I actually did follow those instructions verbatim, but still no
dice
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>-----Original Message-----
> >>>>>>>>From: [EMAIL PROTECTED]
> >>>>>>>>[mailto:[EMAIL PROTECTED] On Behalf Of
> >
> > Javier
> >
> >>>>>>>>Szyszlican
> >>>>>>>>Sent: Wednesday, June 30, 2004 12:16 PM
> >>>>>>>>Cc: [EMAIL PROTECTED]
> >>>>>>>>Subject: Re: [jffnms-users] Can't get MySQL Pipe working with
> >>>
> >>>syslog-ng
> >>>
> >>>
> >>>>>>>>Hi Clayton,
> >>>>>>>>
> >>>>>>>>You can also try the say suggested in the docs/unix/ folder.
> >>>>>>>>
> >>>>>>>>Javier
> >>>>>>>>
> >>>>>>>>Clayton Dukes wrote:
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>>Howdy folks,
> >>>>>>>>>I'm having trouble getting the pipe working for syslog-ng.
> >>>>>>>>>I've read the documentation thoroughly and have the following
> >
> > entries
> >
> >>>>>>>>>in /etc/syslog-ng/syslog-ng.conf
> >>>>>>>>>
> >>>>>>>>>source s_jffnms { unix-dgram("/dev/log"); internal(); udp(); };
> >>>>>>>>>destination d_jffnms { pipe("/tmp/mysql.pipe"
> >>>>>>>>>template("INSERT INTO syslog (date, date_logged, host, message)
> >>>>>>>>>VALUES ('$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', NOW\(\), '$FULLHOST
',
> >>>>>>>>>'$MSG');\n") template-escape(yes));
> >>>>>>>>>};
> >>>>>>>>>log { source(s_jffnms); destination(d_jffnms); };
> >>>>>>>>>
> >>>>>>>>>and I have a shell script for the pipe:
> >>>>>>>>>
> >>>>>>>>>#!/bin/sh
> >>>>>>>>>
> >>>>>>>>>MYPIPE="/tmp/mysql.pipe"
> >>>>>>>>>
> >>>>>>>>>if [ ! -e $MYPIPE ] ; then
> >>>>>>>>>mkfifo $MYPIPE
> >>>>>>>>>fi
> >>>>>>>>>
> >>>>>>>>>while [ -e $MYPIPE ] ; do
> >>>>>>>>>mysql -u jffnms --password=jffnms jffnms < $MYPIPE done
> >>>>>>>>>
> >>>>>>>>>I run the script, then restart syslog-ng and then tail -f
> >>>>>>>>>/tmp/mysql.pipe but I get no data. Anyone have any ideas?
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>Regards,
> >>>>>>>>>Clayton Dukes
> >>>>>>>>>CCNA, CCDA, CCNP, CCDP
> >>>>>>>>>Sr. Network Engineer
> >>>>>>>>>E Solutions Corp.
> >>>>>>>>>http://www.esnet.com
> >>>>>>>>>813.301.2620 (o)
> >>>>>>>>>813.545.7373 (c)
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>-------------------------------------------------------
> >>>>>>>>>This SF.Net email sponsored by Black Hat Briefings & Training.
> >>>>>>>>>Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> >
> > digital
> >
> >>>>>>>>>self defense, top technical experts, no vendor pitches, unmatched
> >>>>>>>>>networking opportunities. Visit www.blackhat.com
> >>>>>>>>>_______________________________________________
> >>>>>>>>>jffnms-users mailing list
> >>>>>>>>>[EMAIL PROTECTED]
> >>>>>>>>>https://lists.sourceforge.net/lists/listinfo/jffnms-users
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>--
> >>>>>>>>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> >>>>>>>>Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
> >>>>>>>>
> >>>>>>>>I hope JFFNMS or I were helpful to you, if you can, please donate
at
> >>>>>>>>http://jffnms.org/donate
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>-------------------------------------------------------
> >>>>>>>>This SF.Net email sponsored by Black Hat Briefings & Training.
> >>>>>>>>Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> >
> > digital
> >
> >>>>>self
> >>>>>
> >>>>>
> >>>>>
> >>>>>>>>defense, top technical experts, no vendor pitches, unmatched
> >>>
> >>>networking
> >>>
> >>>
> >>>>>>>>opportunities. Visit www.blackhat.com
> >>>>>>>>_______________________________________________
> >>>>>>>>jffnms-users mailing list
> >>>>>>>>[EMAIL PROTECTED]
> >>>>>>>>https://lists.sourceforge.net/lists/listinfo/jffnms-users
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>--
> >>>>>>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> >>>>>>Javier Szyszlican, Project Leader, JFFNMS
> >>>>>>[EMAIL PROTECTED]
> >>>>>>
> >>>>>>I hope JFFNMS or I were helpful to you, if you
> >>>>>>can, please donate at http://jffnms.org/donate
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>-------------------------------------------------------
> >>>>>>This SF.Net email sponsored by Black Hat Briefings & Training.
> >>>>>>Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> >>>>>>digital self defense, top technical experts, no vendor pitches,
> >>>>>>unmatched networking opportunities. Visit www.blackhat.com
> >>>>>>_______________________________________________
> >>>>>>jffnms-users mailing list
> >>>>>>[EMAIL PROTECTED]
> >>>>>>https://lists.sourceforge.net/lists/listinfo/jffnms-users
> >>>>>
> >>>>>
> >>>>--
> >>>>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> >>>>Javier Szyszlican, Project Leader, JFFNMS
> >>>>[EMAIL PROTECTED]
> >>>>
> >>>>I hope JFFNMS or I were helpful to you, if you
> >>>>can, please donate at http://jffnms.org/donate
> >>>>
> >>>>
> >>>>
> >>>>-------------------------------------------------------
> >>>>This SF.Net email sponsored by Black Hat Briefings & Training.
> >>>>Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> >>>>digital self defense, top technical experts, no vendor pitches,
> >>>>unmatched networking opportunities. Visit www.blackhat.com
> >>>>_______________________________________________
> >>>>jffnms-users mailing list
> >>>>[EMAIL PROTECTED]
> >>>>https://lists.sourceforge.net/lists/listinfo/jffnms-users
> >>>
> >>>
> >>--
> >>=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> >>Javier Szyszlican, Project Leader, JFFNMS
> >>[EMAIL PROTECTED]
> >>
> >>I hope JFFNMS or I were helpful to you, if you
> >>can, please donate at http://jffnms.org/donate
> >>
> >>
> >>
> >>-------------------------------------------------------
> >>This SF.Net email sponsored by Black Hat Briefings & Training.
> >>Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> >>digital self defense, top technical experts, no vendor pitches,
> >>unmatched networking opportunities. Visit www.blackhat.com
> >>_______________________________________________
> >>jffnms-users mailing list
> >>[EMAIL PROTECTED]
> >>https://lists.sourceforge.net/lists/listinfo/jffnms-users
> >
> >
>
> --
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Javier Szyszlican, Project Leader, JFFNMS
> [EMAIL PROTECTED]
>
> I hope JFFNMS or I were helpful to you, if you
> can, please donate at http://jffnms.org/donate
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by Black Hat Briefings & Training.
> Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
> digital self defense, top technical experts, no vendor pitches,
> unmatched networking opportunities. Visit www.blackhat.com
> _______________________________________________
> jffnms-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/jffnms-users
<<plus.png>>
<<minus.png>>
<<new.png>>
<<edit.png>>
<<delete.png>>
<<query.png>>
