{"id":1829,"date":"2014-09-15T00:41:51","date_gmt":"2014-09-14T16:41:51","guid":{"rendered":"http:\/\/blog.hoyo.idv.tw\/?p=1829"},"modified":"2017-05-08T13:21:29","modified_gmt":"2017-05-08T05:21:29","slug":"freebsd-rsyslog","status":"publish","type":"post","link":"https:\/\/blog.hoyo.idv.tw\/?p=1829","title":{"rendered":"FreeBSD RSysLog"},"content":{"rendered":"

\u53c3\u8003\u8cc7\u6e90\uff1aHOWTO : Rsyslog + MySQL on FreeBSD<\/a><\/p>\n

 <\/p>\n

CREATE DATABASE Syslog;\r\nUSE Syslog;\r\nCREATE TABLE SystemEvents\r\n(\r\n    ID int unsigned not null auto_increment primary key,\r\n    CustomerID bigint,\r\n    ReceivedAt datetime NULL,\r\n    DeviceReportedTime datetime NULL,\r\n    Facility smallint NULL,\r\n    Priority smallint NULL,\r\n    FromHost varchar(60) NULL,\r\n    Message text,\r\n    NTSeverity int NULL,\r\n    Importance int NULL,\r\n    EventSource varchar(60),\r\n    EventUser varchar(60) NULL,\r\n    EventCategory int NULL,\r\n    EventID int NULL,\r\n    EventBinaryData text NULL,\r\n    MaxAvailable int NULL,\r\n    CurrUsage int NULL,\r\n    MinUsage int NULL,\r\n    MaxUsage int NULL,\r\n    InfoUnitID int NULL ,\r\n    SysLogTag varchar(60),\r\n    EventLogType varchar(60),\r\n    GenericFileName VarChar(60),\r\n    SystemID int NULL\r\n);\r\n\r\nCREATE TABLE SystemEventsProperties\r\n(\r\n    ID int unsigned not null auto_increment primary key,\r\n    SystemEventID int NULL ,\r\n    ParamName varchar(255) NULL ,\r\n    ParamValue text NULL\r\n);<\/pre>\n
 <\/p>\n
mysql> grant all privileges on Syslog.* to 'sysloguser'@'%' identified by 'syslogpass' with grant option<\/pre>\n
 <\/p>\n
cd \/usr\/ports\/sysutils\/rsyslog7\r\nmake install clean\r\nee \/usr\/local\/etc\/rsyslog.conf<\/pre>\n
 <\/p>\n
RHEL 6.x \u642d\u5efarsyslog\u65e5\u5fd7\u670d\u52a1\u5668\u548cloganalyzer \u65e5\u5fd7\u5206\u6790\u5de5\u5177<\/a><\/p>\n
$ModLoad imuxsock.so\r\n$ModLoad imklog\r\n$ModLoad immark\r\n$ModLoad ommysql\r\n*.* :ommysql:localhost,Syslog,sysloguser,syslog<\/pre>\n
 <\/p>\n
\/usr\/local\/etc\/rc.d\/rsyslogd restart<\/pre>\n
 <\/p>\n
--<\/p>\n
<\/div>\n
<\/path><\/svg><\/i>  1,377 total views<\/p>\n
<\/div>\n","protected":false},"excerpt":{"rendered":"
\u53c3\u8003\u8cc7\u6e90\uff1aHOWTO : Rs...<\/p>\n
<\/div>\n
<\/path><\/svg><\/i>  1,377 total views<\/p>\n
<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[259],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1829"}],"collection":[{"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1829"}],"version-history":[{"count":12,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1829\/revisions"}],"predecessor-version":[{"id":2684,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1829\/revisions\/2684"}],"wp:attachment":[{"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1829"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1829"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.hoyo.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1829"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}