Hello,
this is my first messge to the list. I'm using debian:
# uname -a
Linux lw06 2.6.32-5-amd64 #1 SMP Sun Sep 23 10:07:46 UTC 2012 x86_64
GNU/Linux
# mysql --version
mysql Ver 14.14 Distrib 5.1.63, for debian-linux-gnu (x86_64) using
readline 6.1
# rsyslogd -v
rsyslogd 4.6.4, compiled with:
FEATURE_REGEXP: Yes
FEATURE_LARGEFILE: No
FEATURE_NETZIP (message compression): Yes
GSSAPI Kerberos 5 support: Yes
FEATURE_DEBUG (debug build, slow code): No
Atomic operations supported: Yes
Runtime Instrumentation (slow code): No
See http://www.rsyslog.com for more information.
I would like to filñter mysql syslog messages, so I have this configuration
file:
root@lw06:/home/cau1# cat /etc/rsyslog.d/mysql.conf
#Cuando el nombre del programa que genera el log contenga "mysql" lo envías
al fichero...
if $programname == 'msqld' or $msg contains 'mysql' then
-/var/log/mysql/mysql.log
#y luego lo tiras
& ~
When I, for example, restart mysql, my log in /var/log/mysql/mysql.log is:
# tail -f /var/log/mysql/mysql.log
...
Apr 5 11:59:09 lw06 mysqld: 130405 11:59:09 [Note] /usr/sbin/mysqld:
Normal shutdown
Apr 5 11:59:16 lw06 mysqld: 130405 11:59:16 [Note] /usr/sbin/mysqld:
Shutdown complete
Apr 5 11:59:16 lw06 mysqld_safe: mysqld from pid file
/var/run/mysqld/mysqld.pid ended
Apr 5 11:59:17 lw06 mysqld_safe: Starting mysqld daemon with databases
from /var/lib/mysql
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 [Note] /usr/sbin/mysqld: ready
for connections.
Apr 5 11:59:17 lw06 mysqld: Version: '5.1.63-0+squeeze1-log' socket:
'/var/run/mysqld/mysqld.sock' port: 3306 (Debian)
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1576]: /usr/bin/mysql_upgrade:
the '--basedir' option is always ignored
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1576]: Looking for 'mysql' as:
/usr/bin/mysql
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1576]: Looking for
'mysqlcheck' as: /usr/bin/mysqlcheck
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1576]: This installation of
MySQL is already upgraded to 5.1.63, use --force if you still need to run
mysql_upgrade
...
But, but there are lines that are not removed from /var/log/syslog file:
# tail -f /var/log/syslog
Apr 5 11:59:16 lw06 mysqld:
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 [Warning] '--log_slow_queries'
is deprecated and will be removed in a future release. Please use
''--slow_query_log'/'--slow_query_log_file'' instead.
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 [Note] Plugin 'FEDERATED' is
disabled.
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 InnoDB: Initializing buffer
pool, size = 8.0M
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 InnoDB: Completed
initialization of buffer pool
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 InnoDB: Started; log sequence
number 0 44253
Apr 5 11:59:17 lw06 mysqld: 130405 11:59:17 [Note] Event Scheduler: Loaded
0 events
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1573]: Upgrading MySQL tables
if necessary.
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1583]: Checking for insecure
root accounts.
Apr 5 11:59:18 lw06 /etc/mysql/debian-start[1587]: Triggering
myisam-recover for all MyISAM tables
Can somebody help me?
Thank you very much and sorry for my english.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
