Having a problem with syslog messages sent to zensyslog from my Netgear
router/firewall. (Getting column "None" unknown) Any suggestions how to
correct or workaround this issue ?
Alan
2007-01-02 19:35:24 DEBUG zen.Syslog: host=somehost.domain.com,
ip=x.x.x.1
2007-01-02 19:35:24 DEBUG zen.Syslog: Tue, 2007-01-02 19:35:24 - [Device
Receive TCP Packet - Source:x.x.x.150,
33209 - Destination:x.x.x.1,80 - [Receive]]
2007-01-02 19:35:24 DEBUG zen.Syslog: fac=None pri=None
2007-01-02 19:35:24 DEBUG zen.Syslog: facility=unknown severity=5
2007-01-02 19:35:24 DEBUG zen.Syslog: Tue, 2007-01-02 19:35:24 - [Device
Receive TCP Packet - Source:x.x.x.150,
33209 - Destination:x.x.x.1,80 - [Receive]]
2007-01-02 19:35:24 DEBUG zen.Syslog: Tue, 2007-01-02 19:35:24 - [Device
Receive TCP Packet - Source:x.x.x.150,
33209 - Destination:x.x.x.1,80 - [Receive]]
2007-01-02 19:35:24 DEBUG zen.Syslog: tag regex:
^(?P<component>.+)\[(?P<ntseverity>\D+)\] (?P<ntevid>\d+) (?P<summ
ary>.*)
2007-01-02 19:35:24 DEBUG zen.Syslog: tag regex: %CARD-\S+:(SLOT\d+)
%(?P<eventClassKey>\S+): (?P<summary>.*)
2007-01-02 19:35:24 DEBUG zen.Syslog: tag regex:
%(?P<eventClassKey>(?P<component>\S+)-\d-\S+): (?P<summary>.*)
2007-01-02 19:35:24 DEBUG zen.Syslog: tag regex: (?P<component>\S
+)\[(?P<pid>\d+)\]: (?P<summary>.*)
2007-01-02 19:35:24 DEBUG zen.Syslog: tag regex: (?P<component>\S+):
(?P<summary>.*)
2007-01-02 19:35:24 WARNING zen.Syslog: parseTag failed:'Tue, 2007-01-02
19:35:24 - [Device Receive TCP Packet - So
urce:x.x.x.150,33209 - Destination:x.x.x.1,80 - [Receive]]
'
2007-01-02 19:35:24 DEBUG zen.Syslog: no eventClassKey assigned
2007-01-02 19:35:24 DEBUG zen.Events: Found device=somehost.domain.com
2007-01-02 19:35:24 DEBUG zen.Events: lookup
eventClassKey:defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: match
on:/Events/Heartbeat/instances/defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: regex='-- MARK --' summary='Tue,
2007-01-02 19:35:24 - [Device Receive TCP Pa
cket - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 - [Receive]]
'
2007-01-02 19:35:24 DEBUG zen.Events: match
on:/Events/Ignore/instances/defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: regex='message repeated \d+ times'
summary='Tue, 2007-01-02 19:35:24 - [Devic
e Receive TCP Packet - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]
'
2007-01-02 19:35:24 DEBUG zen.Events: match
on:/Events/App/Stop/instances/defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: regex='(shutdown|stop).*succeeded'
summary='Tue, 2007-01-02 19:35:24 - [Devic
e Receive TCP Packet - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]
2007-01-02 19:35:24 DEBUG zen.Events: match
on:/Events/App/Start/instances/defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: regex='start.*succeeded'
summary='Tue, 2007-01-02 19:35:24 - [Device Receive
TCP Packet - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]
'
2007-01-02 19:35:24 DEBUG zen.Events: match
on:/Events/App/Reload/instances/defaultmapping
2007-01-02 19:35:24 DEBUG zen.Events: regex='\S+ -HUP succeeded'
summary='Tue, 2007-01-02 19:35:24 - [Device Receiv
e TCP Packet - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]
'
2007-01-02 19:35:24 DEBUG zen.Events: No EventClass matched
2007-01-02 19:35:24 DEBUG zen.Events: insert into status set
Location='',priority=None,prodState=1000,firstTime=116
7784524.512,severity=5,facility='unknown',ipAddress='x.x.x.1',manager='somehost.domain.com',summary='Tue,
2007-
01-02 19:35:24 - [Device Receive TCP Packet - Source:x.x.x.150,33209 -
Destination:x.x.x.1,80 - [Receive]]\
n',dedupid='somehost.domain.com||||5|Tue, 2007-01-02 19:35:24 - [Device
Receive TCP Packet - Source:x.x.x.15
0,33209 - Destination:x.x.x.1,80 - [Receive]]\n|Tue, 2007-01-02 19:35:24
- [Device Receive TCP Packet - Source:
x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]\n',DeviceGroups='|',DeviceClass='/Network/Router/Fire
wall',device='somehost.domain.com',message='Tue, 2007-01-02 19:35:24 -
[Device Receive TCP Packet - Source:10.21
5.50.150,33209 - Destination:x.x.x.1,80 -
[Receive]]\n',lastTime=1167784524.512,Systems='|',eventKey='',evid='0
aa8b3eb34cc84cfffdf4c' on duplicate key update
prodState=1000,summary='Tue, 2007-01-02 19:35:24 - [Device Receive T
CP Packet - Source:x.x.x.150,33209 - Destination:x.x.x.1,80 -
[Receive]]\n',count=count+1,lastTime=11677845
24.512
2007-01-02 19:35:24 ERROR zen.Events: (1054, "Unknown column 'None' in
'field list'")
Traceback (most recent call last):
File "/usr/local/zenoss/Products/ZenEvents/MySqlSendEvent.py", line
19, in execute
result = cursor.execute(statement)
File "usr/local/zenoss/lib/python/MySQLdb/cursors.py", line 137, in
execute
self.errorhandler(self, exc, value)
File "usr/local/zenoss/lib/python/MySQLdb/connections.py", line 33, in
defaulterrorhandler
raise errorclass, errorvalue
OperationalError: (1054, "Unknown column 'None' in 'field list'")
2007-01-02 19:35:24 ERROR zen.Events: (1054, "Unknown column 'None' in
'field list'")
Traceback (most recent call last):
File "/usr/local/zenoss/Products/ZenEvents/MySqlSendEvent.py", line
87, in sendEvent
self.doSendEvent(event, db)
File "/usr/local/zenoss/Products/ZenEvents/MySqlSendEvent.py", line
109, in doSendEvent
rescount = execute(curs, stmt)
File "/usr/local/zenoss/Products/ZenEvents/MySqlSendEvent.py", line
24, in execute
raise ex
OperationalError: (1054, "Unknown column 'None' in 'field list'")
2007-01-02 19:35:24 ERROR zen.Syslog: event processing failure:
somehost.domain.com
Traceback (most recent call last):
File "/usr/local/zenoss/Products/ZenEvents/SyslogProcessingThread.py",
line 90, in run
self.zem.sendEvent(evt)
File "/usr/local/zenoss/Products/ZenEvents/MySqlSendEvent.py", line
92, in sendEvent
raise ZenBackendFailure(str(e))
ZenBackendFailure: (1054, "Unknown column 'None' in 'field list'")
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
