Well, you use different filters, so there is a difference by design. Try this:
*.* :ommysql:localhost,Syslog,rsyslog,123456 & /var/log/all.log If you now compare the mysql table and /var/log/all.log, the content should be identical. HTH Rainer On Wed, Jul 2, 2014 at 10:42 AM, Ouychai Chaita <[email protected]> wrote: > I'm checking many time with text log and mysql log example with some line > in a log. > > Jul 2 15:16:01 ubuntu squid3: 1404288961.299 0 192.168.101.58 > TCP_DENIED/407 3577 CONNECT talk.google.com:5222 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.301 0 192.168.101.58 > TCP_DENIED/407 3591 CONNECT talk.google.com:443 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.304 0 192.168.101.58 > TCP_DENIED/407 3589 CONNECT talkx.l.google.com:5222 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.306 0 192.168.101.58 > TCP_DENIED/407 3603 CONNECT talkx.l.google.com:443 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.727 0 192.168.101.58 > TCP_DENIED/407 3750 CONNECT www.googleapis.com:443 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.729 0 192.168.101.58 > TCP_DENIED/407 3750 CONNECT www.googleapis.com:443 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.731 0 192.168.101.58 > TCP_DENIED/407 3750 CONNECT www.googleapis.com:443 - NONE/- text/html > Jul 2 15:16:01 ubuntu squid3: 1404288961.734 0 192.168.101.58 > TCP_DENIED/407 3750 CONNECT www.googleapis.com:443 - NONE/- text/html > Jul 2 15:16:04 ubuntu squid3: 1404288964.007 10327 192.168.101.58 > TCP_MISS/200 3926 CONNECT www.google.co.th:443 ouychai DIRECT/ > 173.194.127.215 - > Jul 2 15:16:08 ubuntu squid3: 1404288968.485 0 192.168.101.58 > TCP_DENIED/407 3707 GET http://videosearch.ubuntu.com/v0/sources - NONE/- > text/html > Jul 2 15:16:14 ubuntu squid3: 1404288974.009 17802 192.168.101.58 > TCP_MISS/200 3974 CONNECT lh3.googleusercontent.com:443 ouychai DIRECT/ > 74.125.130.132 - > Jul 2 15:16:14 ubuntu squid3: 1404288974.009 17802 192.168.101.58 > TCP_MISS/200 3974 CONNECT lh5.googleusercontent.com:443 ouychai DIRECT/ > 74.125.130.132 - > Jul 2 15:16:14 ubuntu squid3: 1404288974.009 17802 192.168.101.58 > TCP_MISS/200 4250 CONNECT ssl.gstatic.com:443 ouychai DIRECT/61.19.1.104 - > Jul 2 15:16:23 ubuntu squid3: 1404288983.986 0 192.168.101.58 > TCP_DENIED/407 3754 CONNECT clients3.google.com:443 - NONE/- text/html > > I'm checking this record from mysql but not found. I'm checking a record in > mysql and not found in a text file too. I want to the result of every line > in a text file log are the same in mysql record. > > > On Wed, Jul 2, 2014 at 2:35 PM, Rainer Gerhards <[email protected]> > wrote: > > > On Wed, Jul 2, 2014 at 9:34 AM, Ouychai Chaita <[email protected]> > > wrote: > > > > > Dear all, > > > I'm a new one with rsyslog. I'm living in Thailand. I'm try to > search > > a > > > forum from google.com and can't find any forum to have information > about > > > Rsyslog. I'm registered for subscription. > > > I'm try to config an Rsyslog but found a problems with rsyslog send a > log > > > difference between a text log and mysql > > > > > > > What is this difference? > > > > Rainer > > > > > > > > kern.=debug -/var/log/iptables/iptables.log > > > > > > kern.*;kern.!=debug -/var/log/kern.log > > > > > > > > > local0.* /var/log/squid/squid.log > > > > > > > > > *.* :ommysql:localhost,Syslog,rsyslog,123456 > > > > > > RSYSLOGD_OPTIONS="-c4 -6" > > > > > > > > > I'm running an rsyslog on VM(Virtual machine). I"m checking on > > > /var/log/squid/squid.log and mysql database are difference. > > > > > > > > > Ouychai Chaita > > > > > > President of Lanna Opensource Software Club > > > www.lanna-oss.org > > > (66) 08-7185-0920 > > > skype : ouychai_chaita > > > My Own Website: www.ouychai.com > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > > > > -- > Ouychai Chaita > > President of Lanna Opensource Software Club > www.lanna-oss.org > (66) 08-7185-0920 > skype : ouychai_chaita > My Own Website: www.ouychai.com > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
