LogAnalyzer Setup - Revision history

Support at 20:44, 12 June 2017

2017-06-12T20:44:02Z

Support at 20:42, 12 June 2017

2017-06-12T20:42:03Z

Support: Support moved page LogAnalyzer to LogAnalyzer Setup without leaving a redirect

2017-06-12T20:39:28Z

Support moved page LogAnalyzer to LogAnalyzer Setup without leaving a redirect

Support at 22:08, 8 June 2017

2017-06-08T22:08:48Z

Support at 00:29, 23 May 2017

2017-05-23T00:29:26Z

Support at 00:28, 23 May 2017

2017-05-23T00:28:07Z

Support: /* Recreating mySQL database */

2017-05-23T00:22:33Z

‎Recreating mySQL database

Support: /* Software Setup */

2017-05-23T00:00:17Z

‎Software Setup

Support: /* Software Setup */

2017-05-22T23:59:51Z

‎Software Setup

Support at 23:52, 22 May 2017

2017-05-22T23:52:08Z

@@ Line 117: / Line 117: @@
 ===  Client Rsyslog Setup ===
 configure clients to connect to this central syslog server [[Rsyslog Client]]
 ===  Recreating mySQL database ===

← Older revision		Revision as of 20:42, 12 June 2017
Line 1:		Line 1:
−	PARENT PAGE LINK: [[~~Syslog~~]]	+	PARENT PAGE LINK: [[LogAnalyzer]]
		+

	Note: this document has been used with the following loganalyzer versions: 3.0.2 (and a few before 3.0.2), 4.1.5		Note: this document has been used with the following loganalyzer versions: 3.0.2 (and a few before 3.0.2), 4.1.5

@@ Line 34: / Line 34: @@
   mysql> flush privileges;
-. Update /etc/rsyslog.conf<br>
+. Update /etc/rsyslog.conf, make sure the following lines are added<br>
-Make sure the following is added<br>
+Add the following to the end of the ModLoad/MODULES section
-Add the following line to end of ModLoad/MODULES section
   # enable mySql plugin/module
   $ModLoad ommysql
-Add the following line to the beginning of the logging/RULES section (before #kern.* line)
+Add the following to the beginning of the logging/RULES section (before #kern.* line)
   # log all to mySql
   *.*       :ommysql:127.0.0.1,Syslog,syslog-insert,somepwA

@@ Line 114: / Line 114: @@
 f. set EnableIPAddressResolve
   $CFG['EnableIPAddressResolve'] = 1;
 ===  Purging mySQL database ===
@@ Line 144: / Line 147: @@
   Server mySQL Setup; steps 2-4
   Web Interface Setup; step 1

@@ Line 13: / Line 13: @@
   # yum install rsyslog-mysql php-mysql
-. Get latest loganalyzer package (http://loganalyzer.adiscon.com/) and copy to /tmp
+. Get the latest loganalyzer package (http://loganalyzer.adiscon.com/) and copy to /tmp
 . Uncompress and move to standard RedHat/CentOS compatible 3rd party software location (/usr/share)<br>
@@ Line 72: / Line 72: @@
   # chkconfig httpd on
-===  Web Interface mySQL setup ===
+===  Web Interface Setup ===
 . setup user and permissions
   # mysql -p
@@ Line 131: / Line 131: @@
   # rm -rf /var/lib/mysql/* /var/lib/mysql/.my*
-. rebuild mysql & loganalyzer tables<br>
+. restart mysql
-Rerun the following steps from above
- Server mySQL Setup; steps 2-4
- Web Interface mySQL setup; step 1
-−
-. restart mysql
   ENT 7
   # systemctl start mariadb
@@ Line 142: / Line 137: @@
   # service mysqld start
-. purge unneeded users and re-add rsyslog users
+. purge unneeded users (link)
-===  Client rsyslog Setup ===
+. rebuild mysql & loganalyzer tables<br>
-. /etc/rsyslog.conf, add @sys.log.server.ip lines to logging section, ex;
+Rerun the following steps from above
- # Log all kernel messages to the console.
+  Rsyslog Server Setup; step 1
-  # Logging much else clutters up the screen.
+  Server mySQL Setup; steps 2-4
-  #kern.*                                                 /dev/console
+  Web Interface Setup; step 1
-−
- # Log anything (except mail) of level info or higher.
- # Don't log private authentication messages!
- *.info;mail.none;authpriv.none;cron.none                /var/log/messages
-−
- # The authpriv file has restricted access.
- authpriv.*                                              /var/log/secure
-−
- # Log all the mail messages in one place.
- mail.*                                                  -/var/log/maillog
-−
- # Log cron stuff
- cron.*                                                  /var/log/cron
-−
- # Everybody gets emergency messages
- *.emerg                                                 *
-−
- # Save news errors of level crit and higher in a special file.
- uucp,news.crit                                          /var/log/spooler
-−
- # Save boot messages also to boot.log
- local7.*                                                /var/log/boot.log
-−
- # centralized logging
- *.* @172.160.135.160:514
-. Restart rsyslog service
+===  Client Rsyslog Setup ===
-  # service rsyslog restart
+configure clients to connect to this central syslog server [[Rsyslog Client]]

← Older revision	Revision as of 20:39, 12 June 2017
(No difference)

@@ Line 123: / Line 123: @@
 If you have to recreate mySQL data from scratch (due to corruption, or other issues)<br>
 . make sure mysql is down
   # service mysqld stop
-. wipe out all the data (make sure this is what you want to do, otherwise google how to repair innodb data)
+. wipe out all the data (make sure this is what you want to do, otherwise if you are wiping it out due to running out of diskspace or database corruption, google how to repair mysql/mariadb innodb databases)
   # rm -rf /var/lib/mysql/* /var/lib/mysql/.my*
@@ Line 132: / Line 135: @@
   Server mySQL Setup; steps 2-4
   Web Interface mySQL setup; step 1
 ===  Client rsyslog Setup ===

@@ Line 13: / Line 13: @@
   # yum install rsyslog-mysql php-mysql
-. Get latest loganalyzer package (http://loganalyzer.adiscon.com/)
+. Get latest loganalyzer package (http://loganalyzer.adiscon.com/), dump in /tmp
 . Uncompress and move to standard RedHat/CentOS compatible 3rd party software location (/usr/share)<br>
 NOTE: 4.1.5 is probably not the version being installed, please use the version number being  installed in place of 4.1.5
   # mkdir /tmp/work-syslog ; cd /tmp/work-syslog/
-  # tar xzvf loganalyzer-4.1.5.tar.gz
+  # tar xzvf /tmp/loganalyzer-4.1.5.tar.gz
   # mkdir /usr/share/loganalyzer-4.1.5 /usr/share/doc/loganalyzer-4.1.5
   # mv loganalyzer-4.1.5/* /usr/share/doc/loganalyzer-4.1.5/
@@ Line 24: / Line 24: @@
   # mv /usr/share/doc/loganalyzer-4.1.5/doc/* /usr/share/doc/loganalyzer-4.1.5/
   # rm -rf /usr/share/doc/loganalyzer-4.1.5/doc /usr/share/doc/loganalyzer-4.1.5/src /usr/share/loganalyzer-4.1.5/doc
   # touch /usr/share/loganalyzer-4.1.5/config.php
   # chown apache.apache /usr/share/loganalyzer-4.1.5/config.php

← Older revision		Revision as of 23:52, 22 May 2017
Line 1:		Line 1:
		+	PARENT PAGE LINK: [[Syslog]]
		+
	Note: this document has been used with the following loganalyzer versions: 3.0.2 (and a few before 3.0.2), 4.1.5		Note: this document has been used with the following loganalyzer versions: 3.0.2 (and a few before 3.0.2), 4.1.5